Let me see this recording.
All right.
Welcome back.
So let's go back, exit this.
And we're going to find we're going to use a poll to a framework.
Poll tools are actually pre-installed in this Docker container.
So what we're going to do is we're going to add the following lines of code because poll tools makes
binary exploitation on Linux extremely easy.
So we're an import
and then we're going to make an executable context binary.
So executable equals context byte context that binary.
That's because Elf.
Dot slash mon.
And what else?
Go to the bottom of our code.
Enter IO equals process as x path and then beneath.
This line, where do you send line must interact.
Now watch how it does this.
Because normally we had to use a really awkward
standard input output, you know, like read the payload, read it back to standard, I'll pipe it into
bone because it uses get s that means it expects a as you can see, watch wall.
Bobby Hi there.
Bobby We can automate the power of this x vulnerable binary that I wrote myself using pen tools.
So let's try this again.
So nano exploit.
Want to clear all of this out?
Running in a debugger.
We're going to run it.
Python three exploit py.
Let me see.
Let me read the write ups again.
Oh, I didn't import all that.
Probably from home.
Import star.
They all process.
Let's get on a path.
Okay.
I just simply use the wrong syntax.
So let's go back and try this again.
That's what our pi x y pi python.
Three x pi.
And we got our show.
Who am I?
ID route ID KD route less cat flag text.
And we still have the flag again.
So that's just introduction to pen tools because in our next exercise, we're going to use Python tools
exclusively so we can actually use it.
You don't have to with tools, you don't have to use things like struct pack, stuff like that.
They actually have the own little functions to make it convenient, but certain versions of Python three,
they don't actually have Python tools available in older versions of Python three.
So we were forced to.
So in those situations it's important to know about the Python C struct module, which is this.
So don't forget to submit your flag to our quiz and move on to statutory bypasses.