5 ms·

I actually have a 100% reliable solution that exploits the executable stack on level 04. No need to guess the address of the stack using one side effect that I

by mpetrov 15y ago

I actually have a 100% reliable solution that exploits the executable stack on level 04. No need to guess the address of the stack using one side effect that I found in this specific case: https://gist.github.com/807e81ad64c4e84a7770 https://gist.github.com/807e81ad64c4e84a7770 (SPOILERS)

saurik 15y ago
Awesome!! I totally saw that call instruction, and then went on a wild goose chase thinking about how to get the string into that register, totally missing the fact that some of my earlier attempts at using printf had established that the string already happened to be there to begin with. Now I just feel dumb. ;P