hi i’m stuck. I can rewrite $eip to any value, but it doesn’t give much result.
I can’t use ret2leb, because I don’t know the “libc” address.
maybe i should focus on plt and got sections. I need a hint.
tell me what strategy should i follow?
or write to me in HP with a more detailed explanation.
thank you in advance!