Sinkmanu

#!/usr/bin/env python

from pwn import *
import string
import time

context.log_level = 'error'

u = make_unpacker(64, endian='little', sign='unsigned')
filename = hex(u('.///flag'))

Sinkmanu

$ echo -e 'import ctypes\nimport sys\nf="/etc/passwd"\nfor i in f:\n\tsys.stdout.write(hex(ctypes.c_uint8(~ord(i)).value)+",")\nsys.stdout.write("\\n")' | python

Sinkmanu

#!/usr/bin/env python

# usage: $ ./srec-checksum.py <s-record without checksum>

import sys

cad = sys.argv[1]
i = 2
checksum = 0
while i<len(cad):

Sinkmanu

from pwn import *


'''
// File: bypass-canary.c
// $ gcc bypass-canary.c -o bypass-canary

#include <stdio.h>
#include <stdlib.h>

Sinkmanu

from pwn import *

'''
// File: leak.c
// gcc leak.c -o leak

#include <stdio.h>

int main(int argc, char *argv[]){
    char buff[64];

Sinkmanu

from pwn import *

'''
// Raspberry pi:
// File: leak.c
// gcc leak.c -o leak
// socat -v tcp-listen:4444,reuseaddr,fork exec:"./leak"

#include <stdio.h>

Sinkmanu

from pwn import *


'''
// File: bypass-protections.c
// gcc bypass-protections.c -o bypass-protections

#include <stdio.h>
#include <stdlib.h>

Sinkmanu

import requests
from bs4 import BeautifulSoup
user_agent = { 'User-Agent' : 'Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/25.0' }
r = requests.get("url", verify=False, headers=user_agent)
soup = BeautifulSoup(r.text, "html5lib")
print soup.find_all('a')

Sinkmanu

#!/usr/bin/env python

from pwn import *

context(arch = 'amd64', os = 'linux')

elf = ELF("./write4")
p = process(elf.path)
#p = gdb.debug("/home/manu/Challenges/write4", '''
#break main

Sinkmanu

from boofuzz import *
import sys

host = sys.argv[1]
port = int(sys.argv[2])

session = Session(target=Target(SocketConnection(host, int(port))))

s_initialize(name="request")
with s_block("verb"):