Walking .init_array on a Toy Packed ELF

Lab stub that mprotects RWX, XOR-decodes a 32-byte .text blob, restores r-x, then returns into real code. readelf of .init_array and PT_GNU_STACK, gdb break on mprotect, dump of the r-x region.

July 18, 2022 · 8 min · 1677 words · Jose Adalberto Gutierrez Ochoa