newstar

1.ret2libc 发现存在pop rdi 观察main函数，可以利用puts函数泄露libc from pwn import * from LibcSearcher import * context(os="linux", arch="amd64", log_level="debug") elf ......

RE PZthon 发现是python写的，先用 pyinstxtractor解包，然后将PZthon.pyc用pycdc反编译得到源码 # Source Generated with Decompyle++ # File: PZthon.pyc (Python 3.9) def hello(): ......

WEEK1 PWN 1.ezshellcode 直接sendline(shellcode)即可 exp： from pwn import * p = remote("node4.buuoj.cn",29374) #p = process('/home/miyu/Desktop/ezshellcode ......