摘要： ![[复现]陇原战"疫"2021网络安全大赛-PWN](https://img2022.cnblogs.com/blog/3032654/202211/3032654-20221123223541730-968954811.png)
bbbaby 控制__stack_chk_fail，栈溢出 from pwn import * context.os = 'linux' context.log_level = "debug" context.arch = 'amd64' p = process('./pwn1')#, env={" 阅读全文
bbbaby 控制__stack_chk_fail，栈溢出 from pwn import * context.os = 'linux' context.log_level = "debug" context.arch = 'amd64' p = process('./pwn1')#, env={" 阅读全文
![[复现]DASCTF Sept X 浙江工业大学秋季挑战赛-PWN](https://img2022.cnblogs.com/blog/3032654/202211/3032654-20221123094957373-587530882.png)
hehepwn 一开始泄露stack地址，然后写入shellcode返回到shellcode执行 from pwn import * context.os = 'linux' context.log_level = "debug" context.arch = 'amd64' p = process