Shellphish targetted ForAllSecure running CROMU_00098 in round 46.


Type 1 POV

eip:0x632c3595 - ebp:0xe41d8cec


The application exited with a segmentation fault

0x8048f59: 0x8048f59 // esp: 0xbaaaa5e8

Execution control corruption via return (return to: 0xbaaaa5e8).

Tracing data from eip: 0x8048f59 tracing source of memory: 0xbaaaa5e8 (value: 0x632c3595)

0x804ddc4 : receive syscall (return)
0x8049d59 : mov dl,byte ptr [eax]
0x8049d5b : mov byte ptr [ebp-0x12],dl
0x8049e52 : mov al,byte ptr [ebp-0x12]
0x8049e63 : mov byte ptr [ecx],al
0x804817f : mov dl,byte ptr [eax]
0x8048181 : mov byte ptr [ebp-0x15],dl
0x80481b0 : mov al,byte ptr [ebp-0x15]
0x80481c1 : mov byte ptr [ecx],al
0x8048f59: ret // address: 0xbaaaa5e8 value: 0x632c3595

Negotiated general register: ebp:0xe41d8cec

Tracing data from eip: 0x8048f59 tracing source of register: ebp (value: 0xe41d8cec)

0x804ddc4 : receive syscall (return)
0x8049d59 : mov dl,byte ptr [eax]
0x8049d5b : mov byte ptr [ebp-0x12],dl
0x8049e52 : mov al,byte ptr [ebp-0x12]
0x8049e63 : mov byte ptr [ecx],al
0x804817f : mov dl,byte ptr [eax]
0x8048181 : mov byte ptr [ebp-0x15],dl
0x80481b0 : mov al,byte ptr [ebp-0x15]
0x80481c1 : mov byte ptr [ecx],al
0x8048f58 : pop ebp
0x8048f59: ret // address: ebp value: 0xe41d8cec

Curated by Lunge Technology, LLC. Questions or comments? Send us email