ROP Challenge: level2
Thanks to Bas from vulnhub for this great ROP challenge.
I'm sorry, it's not a writeup (I didn't have the time), but I give you my script to solve level2 and obtain a shell.
On this level2, I had to deal with some bad chars like \x00,\x0a...
I managed to prepare the stack before to call "mprotect" function:
Here my python script: