BJD3rd(DASCTF) pwn部分题目整理 (oj, stack_chk_fail, __libc_csu_fini, mprotect, init, orw,汇编)
TaQiniOJ-0#include“/home/ctf/flag”@YMemoryMonsterI有canary,利用触发canary时的__stack_chk_fail和题目的任意地址任意写,改写__stack_chk_fail为backdoorexp:frompwnimport*fromLibcSearcherimport*local_file='./Memory_Monster_I'loc