2

I'm new to Linux operating system. Last day, I practice "heap exploitation", and they give me an ELF file, and a libc.so.6 file, and they said I must debug/exploit with that libc file, but I don't know how to use it.

I try to run the ELF file, and I receive "Illegal instruction (core dumped)". After googling, I try with LD_PRELOAD, LD_LIBRARY_PATH but no luck. I'm using LUbuntu 18.04.

So can you guys help me with this case?

Improve this question
1
  • If it fails when attempting to run it, it doesn't appear to be GLIBC or is a modified or older version or one that has been modified. Or do you mean another ELF file? Because on a system for which GLIBC was built, you can execute it as a standalone binary and it will output version and copyright information and some other stuff. Could you perhaps give us the output of running file on both your specific libc.so.6 and the ELF file you were given?
    – 0xC0000022L ♦
    Dec 17, 2019 at 22:58

1 Answer 1

Reset to default
1

I can almost guarantee 'they' are wanting you to perform a return to libc exploit.

Some good references

Improve this answer
3
  • I didn't doubt that. My point was this one. The problem could be succinctly called "link rot". So it makes sense to include an excerpt to aid future internauts to find sources once those links have gone stale ...
    – 0xC0000022L ♦
    Dec 19, 2019 at 10:05
  • Fair enough. Thanks for the tip.
    – kr1tzy
    Dec 20, 2019 at 13:18
  • And just as if to make my point, the second link in the list went stale. And unfortunately it also hadn't been archived by archive.org at the time. But fortunately a (Google) search with operator inurl:Return_to_libc.pdf turned up another source for the same file, it seems (going by author and original URL components).
    – 0xC0000022L ♦
    Jan 17 at 10:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.