-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ROP.call execve syscall ignores parameter #2409
Comments
[------------------------------------stack-------------------------------------]
0000| 0x7fffffffe580 --> 0x7fffffffe5a0 --> 0x0
0008| 0x7fffffffe588 --> 0x68732f6e69622f ('/bin/sh')
0016| 0x7fffffffe590 --> 0x242424242400632d ('-c')
0024| 0x7fffffffe598 --> 0x2400696d616f6877 ('whoami') |
Remember to null-terminate your argv. Hope that helps. rop.call('execve', [b'bin_sh', [[b'/bin/sh'], [b'-c'], [b'whoami'], 0], 0]) EDIT: I wrote sth about double brackets, but I was wrong. Sorry for confusion. |
thank for the fast response: whoami: 0: cannot open : No such file |
Please paste your full code, I think you used |
hey it seems that the
getting this error when i type in my terminal |
wasn't able to spawn a shell with command as parameter:
when i use SROP with write what where gadgets to build a arbitrary string in memory i'm able to spawn a shell but i failed to build an array for the rsi register argv[].
is there any better explaination?
The text was updated successfully, but these errors were encountered: