2019xnuca总决赛adw7 writeup

Thank you, thank you all so very much, thank you to all of you in this room, none of there would be possible without you. Thank you!

题目简介

这是一道arm菜单题

环境搭建

启动环境

安装依赖

sudo apt install -y gcc-arm-linux-gnueabi

启动

qemu-arm  -L /usr/arm-linux-gnueabi ./awd7

gdb调试

安装gdb-multiarch

sudo apt install gdb-multiarch

socat启动

socat tcp-l:10005,fork exec:"qemu-arm  -L /usr/arm-linux-gnueabi ./awd7",reuseaddr

python脚本启动

from pwn import *

p = remote("127.0.0.1","10005")
pause()

gdb调试

gdb-multiarch -q awd7

漏洞利用

ida打开，发现很明显的缓冲区溢出以及get shell的后门。