self-evolving_exploit_offsets/src/free.gdb at main · sha0coder/self-evolving_exploit_offsets · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
set confirm off
set breakpoint pending on
set disassembly-flavor intel
set follow-fork-mode child
set pagination off
#set logging on

unset env LINES
unset env COLUMNS


file xplt

set $lib_count = 0
b nss_load_library
commands
    set $lib_count = $lib_count + 1
    if $lib_count > 2
        printf ">>> ni->name  addr: 0x%x value: %s\n", ni->name, ni->name
    end
    if $lib_count >= 6
        q
    end
    c
end


#b /home/vagrant/sudo-1.8.31/plugins/sudoers/sudoers.c:854
#commands
#    set $user_args_addr = size
#    printf ">>> user_args size: %d\n", size
#    c
#end

b /home/vagrant/sudo-1.8.31/plugins/sudoers/sudoers.c:858
commands
    printf ">>> user_args addr: 0x%x\n", $rax
    c
end