diff --git a/Day 22/Dockerfile b/Day 22/Dockerfile old mode 100644 new mode 100755 index 985a2b5..2cdf600 --- a/Day 22/Dockerfile +++ b/Day 22/Dockerfile @@ -1,6 +1,6 @@ FROM ubuntu:22.04 -RUN apt-get update -y && apt-get install -y socat gdb strace +RUN apt-get update -y && apt-get install -y socat RUN useradd -d /home/santa/ -m -p santa -s /bin/bash santa RUN echo "santa:santa" | chpasswd diff --git a/Day 22/exploit.py b/Day 22/exploit.py index 136d569..1026fc9 100755 --- a/Day 22/exploit.py +++ b/Day 22/exploit.py @@ -8,14 +8,14 @@ import string # Set up pwntools for the correct architecture exe = context.binary = ELF(args.EXE or './pwn') # libc = ELF("/usr/lib/libc.so.6" if args.LOCAL else "./libc.so.6", checksec=False) -libc = ELF("/usr/lib/libc.so.6" if args.LOCAL else "./libc_docker.so.6", checksec=False) +libc = ELF("/usr/lib/libc.so.6" if args.LOCAL else "./libc.so.6", checksec=False) # Many built-in settings can be controlled on the command-line and show up # in "args". For example, to dump all data sent/received, and disable ASLR # for all created processes... # ./exploit.py DEBUG NOASLR # ./exploit.py GDB HOST=example.com PORT=4141 EXE=/tmp/executable -host = args.HOST or 'e529ac3d-26ff-4563-93ef-309578487141.rdocker.vuln.land' +host = args.HOST or '1a889c42-b594-4c56-8b79-ac7e45ede7b4.rdocker.vuln.land' port = int(args.PORT or 1337) def start_local(argv=[], *a, **kw): diff --git a/Day 22/libc.so.6 b/Day 22/libc.so.6 index 8538e7a..47aaade 100755 Binary files a/Day 22/libc.so.6 and b/Day 22/libc.so.6 differ diff --git a/Day 22/libc_docker.so.6 b/Day 22/libc_docker.so.6 deleted file mode 100755 index 47aaade..0000000 Binary files a/Day 22/libc_docker.so.6 and /dev/null differ diff --git a/Day 22/public.tar.xz b/Day 22/public.tar.xz index 351b504..0bd9416 100644 Binary files a/Day 22/public.tar.xz and b/Day 22/public.tar.xz differ diff --git a/Day 22/secret.txt b/Day 22/secret.txt old mode 100644 new mode 100755