pwn中级ROP——ret2csu环境原理漏洞分析payload
地址栈中数据return前a * 136main函数return(rsp)0x400606(gadget1)rsp + 80(填充数据)rsp + 16(rbx)0rsp + 24(rbp)1rsp + 32(r12)write_got_addrrsp + 40(r13)1rsp + 48(r14)write_got_addrrsp + 56(r15)8gadget1的return0x4005F0(gadget2)...