#!/usr/bin/env python """ example pwntool script. NOTE: run inside a tmux session. """ import sys from pwn import * if len(sys.argv) == 2: prog = sys.argv[1] else: prog=os.path.basename(os.getcwd()) context.terminal = ["tmux", "splitw", "-h"] e = ELF(prog) p = gdb.debug([e.path], gdbscript=''' b *main continue ''') """ get_a_shell = e.symbols['get_a_shell'] print(p.recv().decode()) c = cyclic(20) + p32(0x44434241) + p32(0x48474645) p.sendline(c) p.interactive() """