Type your comment> @julianjm said:
Type your comment> @reisraff said:
how can I write the 0x7f ?
I couldn’t… but if you launch the exploit 50 times, you sometimes get the libc in 0x7d or 0x7e, and the the exploit works.
libcbase=0x7efff7a0d000 ???