User Tools
Sidebar
session:extra:advanced-attacks
Table of Contents
0x0E. Topics on Advanced Attacks
Slides
Tutorials
Install angr. See http://angr.io/install.html
You need to use a virtualenv for the installation. It will not work correctly otherwise
Download session-14.tgz
Switch to task-0 and first analyze the binary manually (IDA, gdb, etc). Then analyze the Angr solver: where the state starts, the avoided branches and the target state. Check that it works as expected.
Tasks
Switch to task-1. The task performs a hash on the input and overwrites the return address with the function output. Use this to jump to the win() function.
- Solve the task by hand
- Solve the task using the provided skeleton script.
session/extra/advanced-attacks.txt · Last modified: 2020/07/19 12:49 (external edit)
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
