Question: http://prntscr.com/h80vs2 My Question is how will i enter the 8 bits of address that holds password ok in the return address ? 0x18 + 4-28,
http://prntscr.com/h80vs2
My Question is how will i enter the 8 bits of address that holds password ok in the return address ?
0x18 + 4-28, which is exactly the length of "AAAABBBBCCCCDDDDEEEEFFFFGGGG" the following "HHHH will cover the [ral In this tutorial, we are going to hijack the control flow of./crackme0x00 by overwriting the instruction pointer. As a first step, let's make it print out "Password OK:)"! e8 e2 fe ff ff 85 ce 74 ee C7 04 24 96 85 04 e8 movl $ex8e48596, (esp) e8 c2 fe ff ff eb ec C7 04 24 a9 85 e4 e8 movl $ex8e485a9, (esp) e8 b4 fe ff ff b8 ee e0 00 00 call test ie 8048350 %eax , %eax 8048488 8048469: 804846e: 8048478: 8048472: 8048479: 804847e: - 8848480: 8048487: 884848C: 8048491: 8048492: call 8048340 jmp 804848C call 8048340 mov exe,eax leave ret C3 We are going to jump to Ox08048480 such that it prints out "Password OK :) Which characters in input should be changed to 0x08048480? Let me remind you that x86 is a little-endian machine. s hexedit input C-x will save your modification. s cat input | ./crackmeexee IOLI Crackme Level exee Password: Invalid Password! Password oK:) Segmentation fault 0x18 + 4-28, which is exactly the length of "AAAABBBBCCCCDDDDEEEEFFFFGGGG" the following "HHHH will cover the [ral In this tutorial, we are going to hijack the control flow of./crackme0x00 by overwriting the instruction pointer. As a first step, let's make it print out "Password OK:)"! e8 e2 fe ff ff 85 ce 74 ee C7 04 24 96 85 04 e8 movl $ex8e48596, (esp) e8 c2 fe ff ff eb ec C7 04 24 a9 85 e4 e8 movl $ex8e485a9, (esp) e8 b4 fe ff ff b8 ee e0 00 00 call test ie 8048350 %eax , %eax 8048488 8048469: 804846e: 8048478: 8048472: 8048479: 804847e: - 8848480: 8048487: 884848C: 8048491: 8048492: call 8048340 jmp 804848C call 8048340 mov exe,eax leave ret C3 We are going to jump to Ox08048480 such that it prints out "Password OK :) Which characters in input should be changed to 0x08048480? Let me remind you that x86 is a little-endian machine. s hexedit input C-x will save your modification. s cat input | ./crackmeexee IOLI Crackme Level exee Password: Invalid Password! Password oK:) Segmentation fault
