CTF-PWN-堆-【chunk extend/overlapping-2】(hack.lu ctf 2015 bookstore)
文章目录hack.luctf2015bookstore检查IDA源码main函数edit_notedelete_notesubmit.fini_array段劫持(回到main函数的方法)思路python格式化字符串简化思路:exp佛系getshell常规getshellhack.luctf2015bookstore检查got表可写,没有地址随机化(PIE)IDA源码C库函数char*gets(ch