From 38de261934e4c9b86230d96aceb45fe8a71b976b Mon Sep 17 00:00:00 2001 From: AceVest Date: Wed, 20 Jul 2016 22:01:51 +0800 Subject: [PATCH] add 0day 3.2 shellcode --- .../UserInterfaceState.xcuserstate | Bin 16535 -> 15476 bytes learn/test/overflow/0day.3.2.asm | 20 ++++++++++++++++++ .../UserInterfaceState.xcuserstate | Bin 56467 -> 56467 bytes 3 files changed, 20 insertions(+) create mode 100644 learn/test/overflow/0day.3.2.asm diff --git a/learn/AcePlay/AcePlay.playground/playground.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate b/learn/AcePlay/AcePlay.playground/playground.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate index cdb9f75acfe75bf146c2611e280875e593781128..ba649d1f6a0ca166f8e94b340263043004708176 100644 GIT binary patch delta 4818 zcmaJ_X?zn^_nynW+4oG6$z-y%$z+*Kl1aJ&g0&Vz_MH|1%T`%R*~%(QazPLTMF~Pd zK$ccE`C~1s2#SJ$z>BQbg2+;lecu;-e{E3tf8f1eX72gj=b7g`=iKvQ=3#JW%!fvV zuA>_t(S9(xB3D%})(7^5h43xd4;I5=a5$U@V=xZqz*0CLE`p2UGPoR8z%OAXTn{(E zjc^m(47b4Da1Y!Ie}q-=7g!BXz>Dw_ybQ0vtMD4U4sXDl@GnFlfa)PF(jh%^q7)QH z0*at0YKUG&*(et^K^;)X-l!AmjryRzs1Ut{`l0@402+wiMiWsCO-ApaX=plnAANup zpij_3vZebTx?U;lNz|_Vaar{v30iT5%*!3rtE8l`M2ij+ z=|l!`lem@0Ryq<5l_L{^x3H2@tyhbahboUUuK-|9jQ5%of-Qg$2BJiPZAdn;9$KLd z+MxqFVG2xzF6fSTj^B#kiQkJqh(C%yiT{ZKfkC}^=@FnL6hH+Cpn?845$_Veod|i` zB~I8~l2G0LZsJeJ@Wh{XS;FZrk<_n?Jxr+Wqa=;%-XAAojxmX$P8rBg=cgl8!nfPrEuEW$t)_dK8H(B$Wp1=@~vifdRCTLQ-ro-)u0bOv2OUVKozI6gQ& zqzsOQZxbx&j)58jO~T-m2edXW(;TyEEq5tSj*uW_&LE6 zd*M0^Y#7+%Iq_F9aKt@{Uh=t#8qOB`3Vus?%874@9mIFU_r%V4!}v?_M)Ah+m&@S} z_+1@%7X~R9q$a_xxW|>Vt+uoKG0%5)T|e_qVZz@f-3Jf7kohn?QpbF}2m=-aPm% z2H_;P@GNJ0&>e%f;DZ-Rdk7!Zp`T(9#UL$-PJgEC*o`gIx{phbrls-DNP1?*gs$T< zGP4>yCl5g+dl5I1BL%?{ed@}Qi9uG9-0_V3@Tfl%`L$_hWoG{EA|es}KP!wZ|5muc zzZFjG2$8W=L?1})1`chrMm>)k*-F;KO_pmjVaUV}lKXD#B0q;@Yt!wJu4Xb>ufZZrf9 zg)R)*VbB4CdKh%VpbG}XXQ%{?KqJv8G#ZV;ARpJxj6N9j!=MO*l7Ee;^4-DSKpa6rOWvC356Kt*B zy)fuq3rWt44vAG-f1+i&Df9)}Pzz4_`@Fj?%g{!&iD1zd4EkbFSPOnDF)KYB`UdTM zp~PM22ZBX=FzAoLfLh4F#FcbT_zyZ#`;~*}Cv*rM#$XTz#TX36U`QD{ijEO1`Wb_v z7!0e046mzQQsRybM;M(!=U6A{$0v7Hk4r!94gT>;ns7KR5^uhC|_SI3Ioix554JKkz4b7#@YkVHK=~ z7vW`i6<&uo;ca*q-iHs76!EASEkxTYsKrt72-r=S#^qJg57 zqQ7FGVvu66VyI%cqD-+?@ugzDVxwZSVwd74#c@TIqFQlMQKLAoxUN(yNo7=-t;|v8 z#*|H!t(9$+`N~4&Fy%Pq1Z7N#l^2vZRT7m_m8uG;x~RITrm8Ac->UYgj;fBUs#Mjg zbE=D~YpVOIN2({PKh-8RrFN^mYQLIShtz^PUtOr~uO6r_Ru54RQ%_V+QNOF6uAZTu zt)8Qvt1eY9Q2(GlrM{>BOH)r1LmIJ$)TC(r)d-CB>Tc%s5tI$>I zHt4qNcIdv>?b7|KyQI6UyP~_Md#p!#v0kc|>y>(=p3>8LMsL$Q^gex5-&o&S-&7-OeHhP`eak`bu!k1 zY)!T$+mnUlV6uc9NscDRl2geUiZEzZb2EhOgg(x={I4SE@HPgc?DOqQ+1Ys2GK*$<$10KDC5eMwL;YQERDnR0UN@ zZJ>@(7tKmDZRX7(vtW*z)6JRY`sRk_M&_5z?adv{oy~dXuI6s$9_9jbFLR%mxzHRp z&oVDJZ!-U2K4rc|t7#YAkj|x>(67;L>F#tNdH_9~E}=)#6X_U@>G$Xv^!xN&dLBKW z{+ixPAE&G6YWgI7iat%BrLWUB>D%;O`ab=TeoQ~L7%aJ#-j=DBQcJmIrDe5ct!161 z!t%Z4C(9AbF-w&tR&6-w} z%t7W5bA&m@oMrxCE;5&y8_X@{4s*{ci&^znht+NMSbf%@HEfMo)2unx7S=p#ck7$h zp4LKZKkEQ%k#(Z=wDqw~YSYueRa zO4|n8CfgRkj9 zG<7s{R5-RfzIA-(*y$9Ujh)%f9A~a`v2%@ct#h5T!uc>ooFYw;r>I;$SB5Lg)xg!r zwbixLwcEAVwa-=MI^(Kw{o%Ugy6U>;dgyxM`paFTydG2`bc^-O; zykoqRy;Hr@y)(VDytBQFyi2^xz2)8&-qqgEy|LZiYu+b5%9rhX-Pg{S=j-bm;v42G z@s0G2_Ko$u<9pZlo^Ph_1K&r!gm0m5rLV%b-M81b&v(Fg(09mp#COVf##iGz@4Mi; z?7Ql_=O_G9ztQjXyZj!%-_QHQ{)Ya>{#X33`kVNh`J4Ou`e*p(``7zV`hWM|@;`}j zGS0x6I5TJAtel;BIhF1JZyzpbV%3+JHV_3pfL= z02}ZIxBwr>2*h3qv_}Tm-ehI&vFXvbAtNG9Q z-TXEFNstO=2VW0%2zCz+2#yMl4UP}Sf|FvwDZy#MkAtPbPlAhsOM_*>6~R@(jls>q zuY%h`RLC9jgnXeuXhx_sv>>!F^l9i(SQ3_n6=8LFKzLL*7M>KI5}p>G5uOvC7hVuv z82&W8G`u=o8QvP+6Fw9^8vZ$49sV_ZK728JC44P>GkjZ63mHPLP$Y~H#tX6O!ffGV zp;Y)pSS+j%Rtsx|b;6gzdSRQeU-(5hFI*RH33r7D!s7^vNFwrxGNOs-B9@3Z5{bMV zX%=Y_X&q@7=@{uADTwrr^o{h342ZlFSrge3ITN`QxgB{Dl|}VYW7HgFqV}ja%0+|G ma5NfCk2a3J7H#W^_KLn09aQ&ohNxFB`9!yq&%al6@P7gR36}f- delta 5054 zcmaJ_X?zpa`p)S&lgwmKW|B!VNt@DS+Gd$dnxs$x*$ZOXEEH;~p+JFN$|5_oB{{N` zRSKaL5D>6s5m6Qq1q2Zg_yZzxMQ~%W014%76$xLC-g*gV~$gsS+Z6U|%={mcW0(p|BK=g5%(LI0a6H)8G=g9Ik+?;X80G zTnFES8{uZS1%3p#!<}#!{6BaE9)-u?m+(0J3Z8&p!*lRFya0cO_3#&X5nh6q;qUN1 zd;tG|f5N}uL--%~2q}>YsgVZRP$Eh~c9a}JO;8GQASVi-APS*&s6BcG<)WUb7b-+W zs6QHn2BWcP92$?Nq3Ng+%|J8JEHoR0lkMdq0Q)1v>WX~pP{4Z z82S<&M_-{6=xg*7I*ZPs^XNLdfo`H(=pp(KdW0Sm5<&rp1OgHoLQCkj`r!&$6Mn$= z%5zN$%KQN_*9WrhAY1;!=I5AyCuJ-dbRtg5hII7jVUP}ttDa?70bck zn9kQBW>1vHs*|i+FDpM(Q%_&ox|(YZDDDX-cG>zOl42l>xojiaK@M7>4JN`QXotzL z2~2^G=}{cY>@}Y<_O@L?<}_d!fY@exPqIgR0k^7>QxnL%_=Kk$KVwV21NO=HZ#`R zVU5kuSz;|6m9AlMgoIxOhhv~x1xI3_iSp0JGB&=wI;_oYbP;eGofBY%gs%lXK`)R8 zdPhs6!=l5ZBWmGf7?C(ZUktPu=wid2$s?x2c@lmdtb{Y*OgIb9hI8Ot$YDTZV8DRI zz>EQhfenMC=B4!5|p}7X|?gT42x`gO@PK!JzB&6)uZc$b_{+ zpXS^#RTJyU+sIY%XT~QjQ>=*trm*(8HYqm5aZ6bHTtmrCaoifi%I*zkK(Q?jB!;!m zbycw=j@!f95zkcNY5FPLC*kYhZny`22KU0xF=&E83I+}goEY$Ra6ddCaY_!uLl~rD zkQQwdZHqyA>^EP}*rU{3F{JxR@69ys% z{y0D5Z+?5J<%%Sa|0T98&DQi+c(Xz33cL!h!Rzn_20;u$7-VA56oY1U@D}{7QR*%R zSs1(!mumh*D&KO>sy{U&zfAPl{Q-Z|ir!_JO+9w8;>l5bjEMiKkEBS}ppWDjw8Y@W zxPGfBANwIawHeYPqlB+RI;2N5VvqrYHW;+UpdAM7G3Zc-SY&FXa~Nb}&@oQ$^rXCq z^;ph{KZw3%!HiHdkKG>(iWT`~q0FXP&(w%`e6VnI|kh_=pL`4M+85-LOGr~-om+%P-}F?bDwa2<-EsKl9Y3r)d5 z(GP>7Xq#v~2L0m=_YCU$CaRY3YtTGY1s!Msiop~N24XM>1BAg44E}{d!Wy&))u6>_ z30jKY!k`p`kr<4}pbUcu29?jJu`=$sIIQg*)A_o@RDw}a7sm#NwS|pXnP4T~jbkOT zw}rvv2l2(wzvnqEY(d)_CUQKgXTNv87JZC9kvP##42EGaJlY0>5wW*@4q-3)Lc-Ug z&(S`#A05Epbqq#fFdBm~wdf!^Bylzz$FUfUYoIjDhL~^?oo=AS(|b0%a4kB6zLPl7 z4;W0qU}6JhQf!Op6E2`j|5(^%^sB^)u3}J*K}7>)a!liQ3BRG=8+N&k?x4Hq9tKei zFa~d6Fr^mVM-L=U^d|;WF__jsnI8MiR}riCC;13OQ2%6zkP`}tlTcwW1B00jyjih~ z3^775grQgNn4&SoQ6M2DW=Ru?TN0AIAZZ2jVHlReF)#wB!`W~yoCg=eMQ|}(3ira( z@E3R&{th3&KjB082uV-^(jgid5R1%+LpGFzl97mdqH44sT_h3+8_|?#O|&CA5FLr` zL;*37C?#GeB9n+pVkxnVSV62LRui?v8e$#sF7Y0*huBN(BMuM;iNnMZ;uvw9I6<5w z&J%Z~Drrk;cWFerK)Oo0QMyBVLV8mAjr3dT8R_@ZAEjrd=cPYOf0162K9Wgf2{I&; z%1D`9rj)5=TA5zP$c(Zq*(`CU4eaI*|m#iWekkw=jxrAInZXmaiACe!DACr5?z2rXf0C|wSLn){f%0u}m zKNX-_Q{AW@R4&zv>P_WS1ymtbN)4w*QlqFb)HrGaHHj*xW>S%AY7@1eI!8T{%jIeE zki50Lt-QTFTi!|DS>8+DTb?g3kQd6s@*;V;{2lpb`BC{@`F|9YLav|{HU+P6D_SdZ z75x=s74sD_MYWSVUTsp_)Vw-f?N)o$9n{(CTy>thkGeozs1BLu!B>J{ph>W%6T)gP%p zR_{>nRqs80td$=4KU3N>NPaLq`~D9sqn zIL!pjBu%+yvSzlXMzclph30}*qE%{nZ9v;X`=YkBwyn0kwu`o#wud%X+e_P9J4(Am zyH0x*6Sp?nHN{yU^X}9&|B1 zm>xrqry~>Ta(Xfyr5Do6>D6>Cy@p;#Z=-k6yXf8YKKcNCkUmU*OJAYy&<`1kQ8QXb z&#;V{;TRi}%7{!B(~0TE^ku?K5i^h(#0+7|nQ6={W)AZvQ^hQ2Rx`EC8fF8tk@J^h&2YnT-|*1z$S5%;7&S(nkv1BPO^gmBZ%i|a#w=sDv6Hd0 zF~?YJ9BeEx4mA!ljx$a)mKiII(~X;q+l*(8msvGSvsr8;n|+CWneEDUXJ26p*nVt( zb|5>59nDT)C$Z%$W~Z>z*h+Q=JD**_zQfkBYuWeM_t{PC7Ir6lh&|4pU{A8&us^Ur zvFF$eY`qDYOs3|hPNo7=p($)CG7T^ln+BUoOhZk>Oi|Mtrm3dsrWvMLra7iJO;x4^ z5z|7`2d3SouT2+C_slADvbm-C6?2JslzFsyta-9|wt0bhv3ZqwwYk>3(fq!7llc?# z4)ZSa0rMB;L*}dI2NuF2vrra=MP<=gbe2Sm-O|M3u<({Ni_7A%w6lz|%(rZ_9JKt~ z@~!2JQ27vw@*D=vrY#`WNOa(P@I zu9zFd4dzO?C^wg@;udh#Tn)E`Tf?pAHgNBAo47699`18)KX;Hj%pKuQaX)hxxy#&D z?mBmqd%!)m0xPrOXYFHs)f%=ISqE5)t)s2w z)|u8ftyR_q)*9;)>s!|4)=f6OO|-SNW!pO0I@@w=U2VN>`L@2cu&u~8z&6=dW!q@m zZ#!nYV5_%Xv|YAcv0by>u-&rVvHfoQ!}eDqnJ7JxqFJA83EwKH5IkKHh%Le%*f4{+saU* zHaWIBwmEJ%IcIz4Fy|y^g){1$;+*cB5ph;KYn)4*%bd5Jk9m@p^GaULYk4zo<&*ei zK81Jk0^f}9z~}M#d|y7y_vefGA^cE&7(bcE{8YY@pT*DRtN0kdh+oXt@oV|@{ClaE z)YR1URClV7TAjK&wKjE4>iRTInl&vk&7PK$HZN^i+KRN5Y44;*Ih{*SOs`B| zn7$}|ar#>>mCNFCy3$;3m*Dcdg05DswyqAYj;@znIj*j*5?7ULh3ga7dDj)!ZPy=e zsaxk}+^pN;wz=(Yw_9-g-2r#V-OT-hyO+D%J>=5(Wx`g%Tk$R2VLd6ebF92=j!c!g67y@Q$!XSTB4iY!`M2yM*1s zUSXebR5&Bl3m1jU!WH3~a6|Y*cqlyf0Uz{9eWXw4v-wheL0^`yg|C&by|1IMvoFV& z?X`uh3S`L_AC`#$mQ^4${?M3tx&Y0)T}MXQ)9x+0=i^of2kC}xVS#7<%_v7b0V z93+;ArQ!&2l2{=|#W%#MVx>4!tQC)lXT-aHtKaGO`Lq1l{#<{aKi}WiANKe67yC!~ z$NDGu%lwo5*gw@j-5>K;`)mA5{dY4!2FxHb$c!NwV>8BQOw1_H_%@?H<6_3;jL6kM zb|5#q3bGG&?aOl77fQz^<_!)FY}#He)6D8NyEUwk0kLOI_TKzu&U||S<`xbu delta 33 ncmbQdlX>z^<_!)FY?`GXW~J`m?AEYC2E?9SaBlOLIrHrS0&Ng1 -- 2.47.0