Binary Exploitation

Process

1. objdump -d ./file to get disassembly
2. objdump -t ./file to get symbol addresses
3. gdb ./file with Pwndbg
   1. checksec
4. Create a script with pwntools

Concepts

• Stack
• C
• Code Cave
• ROP
• NOP Slide
• cdecl
• SysV
• Global Offset Table
• Stack Canary

Tricks

• C read()
• Format String Exploitation