1
"""
2
- 本地正常：python3 exp.py
3
- 本地 debug：python3 exp.py DEBUG
4
- 远程正常：python3 exp.py REMOTE
5
- 远程 debug 日志：python3 exp.py REMOTE DEBUG
6
"""
7
from pwn import *
8

9
context(os="linux", terminal=["cmd.exe", "/c", "start"])
10

11
binary_path = "./pwn"
12
host = "127.0.0.1"  # 地址
13
port = 9999  # 端口
14

15
elf = ELF(binary_path, checksec=False)
16
context.binary = elf
17

18
if elf.bits == 64:
19
    context.arch = "amd64"
20
    gdbscript = """
21
    b *main
22
    c
23
    """
24
else:
25
    context.arch = "i386"
26
    gdbscript = """
27
    b *main
28
    c
29
    """
30

31
if args.DEBUG:
32
    context.log_level = "debug"
33
else:
34
    context.log_level = "info"
35

36
if args.REMOTE:
37
    io = remote(host, port)
38
else:
39
    io = process(binary_path)
40
    if args.DEBUG:
41
        gdb.attach(io, gdbscript=gdbscript)
42

43

44
def p():
45
    pause()
46

47

48
# todo
49

50
io.interactive()