Dragon_Knight_CTF-stack(栈迁移)
程序的保护情况如下,可以看到没有开启pie保护
Arch: amd64-64-little
RELRO: Partial RELRO
Stack: No canary found
NX: NX enabled
PIE: No PIE (0x3fe000)可以看道main函数也很简洁,只有一个0x10大小的溢出,程序…
RAVEN2主机发现和nmap扫描
nmap -sT --min-rate 10000 -p- 192.168.56.108PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
111/tcp open rpcbind
54037/tcp open unknown
MAC Address: 00:0C:29:60:6F:30 (VMware)nmap -sT -sV -sC -O -p22,80,111,540…