From 17592e720a70a5ce6ce3ab3c02ba7ec07558840b Mon Sep 17 00:00:00 2001 From: Malfurious Date: Fri, 30 Jul 2021 00:55:02 -0400 Subject: Fix typos Signed-off-by: Malfurious --- docs/writeups/ImaginaryCTF_2021/Speedrun.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'docs/writeups/ImaginaryCTF_2021/Speedrun.txt') diff --git a/docs/writeups/ImaginaryCTF_2021/Speedrun.txt b/docs/writeups/ImaginaryCTF_2021/Speedrun.txt index a7b8283..4bbbf16 100644 --- a/docs/writeups/ImaginaryCTF_2021/Speedrun.txt +++ b/docs/writeups/ImaginaryCTF_2021/Speedrun.txt @@ -62,7 +62,7 @@ This prooved very difficult given our limited access to machine code in the main binary. There was one useful gadget found in the binary near the end of code under the __libc_csu_init symbol, at address 0x40120b; that being: - 5f pop $rdi + 5f pop %rdi c3 ret The randomness to the main() function's buffer didn't affect the offset of these @@ -120,7 +120,7 @@ does this by decoding and disassembling the data it receives on start-up. This just _happens_ to work in this case because the first lea instruction encountered in the binary is the one used to grab the buffer address for gets(). -From there I use a regex to grap the '120' offset value. This is the offset +From there I use a regex to grab the '120' offset value. This is the offset (in hex) from the start of the buffer to the base of the stack frame and is used later for payload generation. -- cgit v1.2.3