/lightning_talk

Primary LanguageC

Lightning Talk

This has been tested on Arch Linux. It will only work if your home directory
is "/home/jc". You should probably try the "UbuntuSupport" branch.

Steps to execute

Linux

  1. Use the command below to disable aslr for an instance of bash. Every child process will have aslr disabled.
setarch `uname -m` -R /bin/bash
export PS1="(no aslr) $PS1"

  1. Construct the binairies, vuln and hak, with make.

  2. ./hak | ./vuln to send the payload.

NOTE: If there is a segmentation fault (highly likely), that is most likely from an invalid return address. Update goal in hak.c to the address given by vuln, and continue from step 2.

MacOS

Try the Linux instructions. I'm not sure if all the tools can be found on a Mac.

Windows

Follow the instructions here.