xf1les

#!/usr/bin/env python3
from pwn import *
import warnings
warnings.filterwarnings("ignore", category=BytesWarning)
context(arch="amd64", log_level="debug")

p = None

p_sl = lambda x, y : p.sendlineafter(y, str(x) if not isinstance(x, bytes) else x) 
p_s  = lambda x, y : p.sendafter(y, str(x) if not isinstance(x, bytes) else x)   

xf1les

#!/usr/bin/env python3
from pwn import *
import warnings
warnings.filterwarnings("ignore", category=BytesWarning)
context(arch="amd64", log_level="debug")

p = remote("47.100.33.132", "2204")
# ~ p = process("./babyheap")

libcbase = None

xf1les

/*
 * Personal Writeup for *CTF 2022 PWN challenge babyarm
 * 
 * Author: xf1les
 * 
 * This EXP demonstrates a solution which can successfully pop a root shell rather than doing ORW (Open/Read/Write) to get flag
 *   (Reminder: I didn't solve this challenge during the event)
 * 
 * ***
 * 

xf1les

#!/usr/bin/env python3
from pwn import *
import warnings
warnings.filterwarnings("ignore", category=BytesWarning)

context(arch="amd64")
context(log_level="debug")

libc = ELF("./libc-2.27.so")