Skip to content

Commit

Permalink
35C3
Browse files Browse the repository at this point in the history
  • Loading branch information
Dvd848 committed Jan 4, 2019
1 parent 4eec4b0 commit 07e81ba
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion 2018_35C3_Junior/arraymaster2.md
Original file line number Diff line number Diff line change
Expand Up @@ -144,7 +144,7 @@ As you can see, the `command` buffer allocated by `getline` is freed when the pr

In our case, the buffer will contain `quit; /bin/sh`, causing the program to quit and then calling `free` (i.e. `system`) on the pointer. `system` won't understand what `quit` means, but it will give us a shell due to `/bin/sh`.

Putting in all together:
Putting it all together:
```python
from pwn import *
import argparse
Expand Down

0 comments on commit 07e81ba

Please sign in to comment.