github地址:https://github.com/ucsb-seclab/leakless
1、Build vuln.c
gcc -fno-stack-protector vuln.c -o /tmp/vuln -m32 -O2 -masm=intel
2、Find the offset of the saved IP
- 安装metasploit
官网相应很慢,从百度搜的资源,下载x.run文件到桌面,赋777权限后sudo ./x.run。安装过程选择默认安装位置,最后一部没有access web UI. - 按http://blog.csdn.net/shadow20080578/article/details/50145149配置,注pattern_create.rb在/opt/metasploit/apps/pro/msf3/tools/中