【IO_FILE leak】De1ctf_2019 weapon 2025-7-04 22:26 | 62 | 0 | BUUCTF wp,buuwp-pwn,Notes,Notes-pwn,WriteUPs Arch: amd64-64-little RELRO: Full RELRO Stack: Canary found NX: NX enabled PIE: PIE enabled libc 是 2.23 的，比较古早。 void __fastcall __noreturn main(int a1, char **a2, char **a3) {… IO_FILE leakpwn堆利用