0x00 off by oneoff by one 是指一种单字节的缓冲区溢出，即程序向缓冲区中写入数据时，写入的字节数...

程序信息note2: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.24, BuildID[sha1]=46dca2e49f923813b316f12858e7e0f42e4a82c3, stripped123456[+] checksec for '/home/pollux/note2/note2&apos...

基本信息1stkof: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.32, BuildID[sha1]=4872b087443d1e52ce720d0a4007b1920f18e7b0, stripped 12345Canary : YesNX ...

刚开始接触堆，将解决的不懂的记录一下，后续会继续更正之前错误的认识。指向堆&...