@@ -39,7 +39,8 @@ A collection of useful tools for writing shellcode
3939[+] Hints: you give me vul_ret_address, I give you the offset :)
4040[*] Example: python getOverFlowOffset.py 0x080484BD example_bin/xdctf15-pwn200
4141```
42- * We now support tracking the program enabling PIE. The example in example_bin/pwn200_PIE
42+ * We now support tracking the program enabling PIE. The example in example_bin/pwn200_PIE
43+
4344```
4445$ python getOverFlowOffset.py 0x00000632 example_bin/pwn200_PIE
4546[*] example_bin/pwn200_PIE is 32 bits
@@ -49,7 +50,7 @@ $ python getOverFlowOffset.py 0x00000632 example_bin/pwn200_PIE
4950[*] The real vul_ret_address is:0x56555632
5051[+] Found offset to the RET_ADDR is 112 (32bits) or 116 (64bits).
5152```
52- * For the program without PIE. The example in example_bin/2018_xnuca_gets_noleave. Also, it has no `leave` instruction before `ret`.
53+ * For the program without PIE. The example in example_bin/2018_xnuca_gets_noleave. Also, it has no ` leave ` instruction before ` ret ` .
5354```
5455$ python getOverFlowOffset.py 0x400434 example_bin/2018_xnuca_gets_noleave
5556[*] example_bin/2018_xnuca_gets_noleave is 64 bits
@@ -59,13 +60,13 @@ $ python getOverFlowOffset.py 0x400434 example_bin/2018_xnuca_gets_noleave
5960
6061* Other examples
6162 * 32-bit program, without PIE, with ` leave ` instruction.
62- * python getOverFlowOffset.py 0x080484BD example_bin/xdctf15-pwn200
63+ * ` python getOverFlowOffset.py 0x080484BD example_bin/xdctf15-pwn200 `
6364 * 32-bit program, with PIE, with ` leave ` instruction.
64- * getOverFlowOffset.py 0x00000632 example_bin/pwn200_PIE
65+ * ` python getOverFlowOffset.py 0x00000632 example_bin/pwn200_PIE`
6566 * 64-bit program, with PIE, with ` leave ` instruction.
66- * python getOverFlowOffset.py 0x00000632 example_bin/pwn200_PIE_64bits
67+ * ` python getOverFlowOffset.py 0x00000632 example_bin/pwn200_PIE_64bits `
6768 * 32-bit program, without PIE, without ` leave ` instruction.
68- * python getOverFlowOffset.py 0x400434 example_bin/2018_xnuca_gets_noleave
69+ * ` python getOverFlowOffset.py 0x400434 example_bin/2018_xnuca_gets_noleave `
6970
7071### Android_routersploit
7172
0 commit comments