rev pwn

Unibw 2023/rev pwn/Baby Cyberdyne/README.md

@@ -0,0 +1,11 @@
+Baby Cyberdyne
+
+In the early years of Cyberdyne Dr. Miles Bennet Dyson was developing all the software himself. This software is up to date til now.
+
+Connect via SSH to baby-cyberdyne.codectf.localos.io:2222 to receive your IP.  Then use local forwarding to connect to your IP to port 8888.
+
+Credentials:
+
+    User:  aa43d20dbbbbfc662d960ab4d51d0fd8
+
+    Password: Ei1gkv2PYS9YFvbZJ1m0QOdCE1i2d90VRdLrvhOdd4I=

Unibw 2023/rev pwn/Baby Cyberdyne/ape.py

@@ -0,0 +1,20 @@
+from pwn import *
+elf = ELF(os.getcwd() + "/0d2dd2de6fc66a1b0e38dc299e38e0da")
+
+gs = '''
+unset env LINES
+unset env COLUMNS
+set follow-fork-mode child
+br *handle_conn+631
+# br *main+420
+continue
+'''
+
+def start():
+    if args.GDB:
+        return gdb.debug([elf.path], gs)
+    else:
+        return process([elf.path])
+
+io = start()
+io.sendline()