Hey, can you please help me with Safe machine. I used gadget chain to call system. It works with /bin/ls argument but not with /bin/bash or /bin/sh.
Moreover, even the /bin/ls exploit is not working remotely.
Initially, the application is calling system('/usr/bin/uptime'). I am also trying to create a chain by pushing
address of pop rdi; ret
address of /bin/sh
address of call [email protected] instruction used by the application
With the above chain, I am not able to get a sh shell, although /bin/ls command is working with the above method.