notes (254B)
1We can use format string exploit to leak values from the stack. 2 3This reveals the base address.. 4 5We can look up the function offset from the base address 6by inspecting where the function lies within the code segment. 7 8objdump -d | grep WIN 9 10gives 0x9ec