Finished extraction of stack return address

src/helpers/.gdb_history

@@ -2,3 +2,40 @@ disass main
 checksec bof
 checksec 
 quit
+disass test_time_values_injection 
+disass test_time_values_injection+74 
+b test_time_values_injection+74 
+b test_time_values_injection + 74 
+b *(test_time_values_injection + 74) 
+r
+si
+si
+si
+si
+q
+b timerfd_settime
+r
+context
+q
+disass test_time_values_injection 
+b *(test_time_values_injection +74)
+r
+si
+si
+q
+b test_time_values_injection +74
+b (test_time_values_injection +74)
+b *(test_time_values_injection +74)
+r
+si
+display/i $pc
+si
+si
+si
+q
+disass test_time_values_injection 
+b *(test_time_values_injection +116)
+r
+si
+si
+q

src/helpers/Makefile

@@ -12,7 +12,7 @@ execve_hijack.o: execve_hijack.c $(HEADERS)
 	clang -g -c execve_hijack.c
 
 execve_hijack: execve_hijack.o lib/libRawTCP_Lib.a
-	clang -lm -g -o execve_hijack execve_hijack.o -ldl -L. lib/libRawTCP_Lib.a
+	clang -lm -g -fno-plt -o execve_hijack execve_hijack.o -ldl -L. lib/libRawTCP_Lib.a
 
 clean:
 	-rm -f execve_hijack.o

src/helpers/execve_hijack.c

@@ -29,7 +29,8 @@ int test_time_values_injection(){
     struct timespec now;
     uint64_t exp, tot_exp;
     ssize_t s;
-    
+
+
     fd = timerfd_create(CLOCK_REALTIME, 0);
     if (fd == -1)
         return -1;
@@ -39,6 +40,7 @@ int test_time_values_injection(){
 
     if (timerfd_settime(fd, TFD_TIMER_ABSTIME, &new_value, NULL) == -1)
         return -1;
+    
         
     printf("Timer %i started, address sent %llx\n", fd, (__u64)&new_value);
 

src/helpers/peda-session-execve_hijack.txt

@@ -0,0 +1,2 @@
+break *(test_time_values_injection +116)
+