lab5

exp5: aslr + PIE -> leak + ret2libc

nc 

Binary protections

➜ checksec ./exp42
    Arch:     amd64-64-little
    RELRO:    Partial RELRO
    Stack:    Canary found
    NX:       NX enabled
    PIE:      No PIE (0x400000)

Some vuln classes

* buffer overflows
* format string
* integer overflow / rounding errors / NaN
* race conditions
* use-after-free
* nullbytes
* uninitialized memory
* softlinks
* type confusion
* injections
* path traversal
* deserialization