pwntools 模板

1
#!/usr/bin/env python3
2
# -*- coding: utf-8 -*-
3
from pwn import *
4

5
BINARY = "./vuln"
6
REMOTE = "yuto0226.com:1337"
7

8
# Set up pwntools for the correct architecture
9
elf = context.binary = ELF(BINARY, checksec=False)
10

11
context.log_level = "info"  # info, debug
12
context.terminal = ["tmux", "splitw", "-h"]
13
context.delete_corefiles = True
14

15

16
def start(argv=[], *a, **kw):
17
    """Start the exploit against the target."""
18
    if args.DEBUG:
19
        return gdb.debug([BINARY] + argv, gdbscript=gdbscript, *a, **kw)
20
    elif args.REMOTE:
21
        host, port = REMOTE.split(":")
22
        return remote(host, int(port))
23
    else:
24
        return process([BINARY] + argv, *a, **kw)
25

26

27
gdbscript = """
28
init-pwndbg
29
b main
30
c
31
""".format(**locals())
32

33
# ===========================================================
34
#                    EXPLOIT GOES HERE
35
# ===========================================================
36

37
io = start()
38

39
flag = io.recvline()
40
success(f"flag: {flag.decode()}")
41

42
io.close()