Binary Exploitation

Process

1. checksec
2. objdump -d ./file to get disassembly
3. objdump -t ./file to get symbol addresses
4. gdb ./file with Pwndbg
5. Create a script with pwntools

Concepts

• Stack
• C
• Code Cave
• ROP
• NOP Slide
• cdecl
• SysV
• Global Offset Table
• Procedure Linkage Table
• Stack Canary
• Use After Free

Tricks

• C read()
• Format String Exploitation