1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

from pwn import *
import sys

binary_path = './chall'

if len(sys.argv) == 3:
    io = remote(sys.argv[1], int(sys.argv[2]))
else:
    io = process(binary_path)
elf = ELF(binary_path)
# libc = ELF("./libc.so.6")
context(arch='amd64', os='linux')

def wait_for_attach():
    print('attach?')
    raw_input()

# str   -> bytes: text.encode('utf-8')
# bytes -> str  : text.decode('utf-8')
# long  -> bytes(big)   : long_to_bytes(num)
# long  -> bytes(little): p64(num)
# bytes -> long(big)    : bytes_to_long(data)
# bytes -> long(little) : int.from_bytes(data, 'little')
# bytes -> int          : int(data, 16)

payload = b''
io.sendlineafter(b'> ', payload)
io.recvline()
io.interactive()

1
2

$ python3 solve.py
$ python3 solve.py localhost 3000