flâneur

ret2libc - Binary Exploitation

ir0nstone.gitbook.io · 723 words · saved by 1 readers

The standard ROP exploit

⌘Ctrlk ret2libc/ret2system The standard ROP exploit A ret2libc, also known as a ret2system, is based off the system function found within the C library. This function executes anything passed to it making it the best target. Another thing found within libc is the string /bin/sh; if you pass this string to system, it will pop a shell. And that is the entire basis of it - passing /bin/sh as a parameter to system. Doesn't sound too bad, right? ret2libc Disabling ASLR To start with, we are going to disable ASLR. ASLR randomises the location of libc in memory, meaning we cannot (without…

related reading