Logout

pwn

基本工具

python pwntools gdb(插件pwndbg)

gdb操作: ![](assets/20210529102714694_29171.png =503x)

寄存器相关

根据Intel在x64中,以下寄存器称为通用寄存器(RAX,RBX,RCX,RDX,RBP,RSI,RDI,RSP和R8-R15

RBP和RSP是专用寄存器(RBP指向当前堆栈帧的基础,RSP指向当前堆栈帧的顶部)

https://www.cnblogs.com/chenpingzhao/p/6562415.html https://xz.aliyun.com/t/6957 http://www.91ri.org/8985.html http://www.91ri.org/11110.html https://su18.org/post/EiNzuduRG/ 大马 https://github.com/su18/Stitch 蠕虫马https://blog.csdn.net/qq_38154820/article/details/106330119 https://github.com/3sNwgeek/awd_worm_phpwebshell_framework/ 绕过disable_functions https://github.com/zhinaonet/bypass_disablefunc_via_LD_PRELOAD