# Gdb Scripting
### Workout chall
We have 3000 elf's, the important thing to note here is all the 32-bit elf's have same instructions placed in the same memory location i.e have same addressses, the only difference between them is the values our input is getting compared to. Same is the thing with 64 bit elf's
Each elf has 3 things to be found out
* The character
* Count of the character
* The 4/8 byte value getting compared with `memcmp` in 32/64 bit respectively
1. Separating 32-bit and 64-bit elf's
#!/bin/bash
i=1
while [ $i -le 3000 ]
do
a=`file $i.bin | cut -d" " -f3`
if [ "$a" == "32-bit" ]
then
mv $i.bin exe32
else
mv $i.bin exe64
fi
i=$(($i + 1))
done
2. 32-bit
we first find all the names of the files and append them into a list
We then iterate the array, and in each iteration, we load each binary, Since the binary is rebased, we set a random breakpoint and run it with a dummy input(empty string), when it stops at that breakpoint we grab all the necessary values and frame the input required and store it in a file, then we delete the previously set breakpoints and again run it with our new input string
```py
import gdb
import struct
files = ['1.bin', '3.bin', '5.bin', '6.bin', '8.bin', '10.bin', '11.bin', '12.bin', '14.bin', '15.bin', '16.bin', '18.bin', '20.bin', '21.bin', '22.bin', '23.bin', '27.bin', '28.bin', '32.bin', '34.bin', '37.bin', '39.bin', '40.bin', '41.bin', '42.bin', '43.bin', '44.bin', '45.bin', '47.bin', '50.bin', '53.bin', '54.bin', '55.bin', '59.bin', '60.bin', '62.bin', '64.bin', '66.bin', '71.bin', '72.bin', '73.bin', '74.bin', '78.bin', '79.bin', '80.bin', '85.bin', '93.bin', '94.bin', '99.bin', '100.bin', '101.bin', '102.bin', '103.bin', '106.bin', '110.bin', '111.bin', '112.bin', '113.bin', '117.bin', '120.bin', '122.bin', '124.bin', '125.bin', '126.bin', '128.bin', '131.bin', '132.bin', '133.bin', '135.bin', '137.bin', '139.bin', '142.bin', '144.bin', '147.bin', '150.bin', '151.bin', '154.bin', '156.bin', '157.bin', '160.bin', '162.bin', '166.bin', '169.bin', '172.bin', '173.bin', '174.bin', '175.bin', '176.bin', '179.bin', '183.bin', '185.bin', '187.bin', '188.bin', '189.bin', '190.bin', '193.bin', '197.bin', '200.bin', '202.bin', '204.bin', '206.bin', '208.bin', '209.bin', '210.bin', '214.bin', '218.bin', '223.bin', '225.bin', '226.bin', '227.bin', '229.bin', '230.bin', '231.bin', '234.bin', '236.bin', '237.bin', '239.bin', '243.bin', '244.bin', '245.bin', '246.bin', '249.bin', '250.bin', '251.bin', '252.bin', '253.bin', '254.bin', '255.bin', '256.bin', '257.bin', '259.bin', '260.bin', '261.bin', '262.bin', '266.bin', '267.bin', '268.bin', '272.bin', '276.bin', '278.bin', '280.bin', '282.bin', '283.bin', '284.bin', '286.bin', '287.bin', '288.bin', '289.bin', '290.bin', '291.bin', '292.bin', '293.bin', '294.bin', '295.bin', '296.bin', '298.bin', '305.bin', '306.bin', '307.bin', '308.bin', '314.bin', '316.bin', '317.bin', '319.bin', '320.bin', '323.bin', '326.bin', '328.bin', '329.bin', '331.bin', '333.bin', '334.bin', '335.bin', '336.bin', '337.bin', '338.bin', '339.bin', '340.bin', '344.bin', '345.bin', '346.bin', '348.bin', '351.bin', '355.bin', '356.bin', '357.bin', '358.bin', '360.bin', '363.bin', '364.bin', '365.bin', '366.bin', '368.bin', '369.bin', '370.bin', '371.bin', '378.bin', '379.bin', '381.bin', '383.bin', '385.bin', '388.bin', '389.bin', '391.bin', '392.bin', '393.bin', '396.bin', '401.bin', '403.bin', '406.bin', '407.bin', '410.bin', '412.bin', '413.bin', '414.bin', '415.bin', '417.bin', '418.bin', '419.bin', '421.bin', '423.bin', '425.bin', '426.bin', '427.bin', '428.bin', '430.bin', '431.bin', '432.bin', '433.bin', '435.bin', '436.bin', '437.bin', '438.bin', '442.bin', '443.bin', '445.bin', '448.bin', '451.bin', '452.bin', '454.bin', '456.bin', '457.bin', '458.bin', '459.bin', '460.bin', '464.bin', '469.bin', '472.bin', '473.bin', '474.bin', '475.bin', '476.bin', '480.bin', '482.bin', '483.bin', '484.bin', '485.bin', '486.bin', '487.bin', '488.bin', '489.bin', '490.bin', '491.bin', '492.bin', '495.bin', '496.bin', '500.bin', '501.bin', '503.bin', '504.bin', '506.bin', '507.bin', '509.bin', '510.bin', '512.bin', '513.bin', '514.bin', '516.bin', '518.bin', '521.bin', '522.bin', '523.bin', '530.bin', '533.bin', '534.bin', '535.bin', '541.bin', '542.bin', '543.bin', '544.bin', '546.bin', '548.bin', '552.bin', '553.bin', '558.bin', '560.bin', '563.bin', '566.bin', '567.bin', '568.bin', '569.bin', '573.bin', '574.bin', '575.bin', '578.bin', '579.bin', '581.bin', '584.bin', '585.bin', '588.bin', '589.bin', '590.bin', '591.bin', '592.bin', '594.bin', '595.bin', '597.bin', '599.bin', '600.bin', '601.bin', '602.bin', '604.bin', '605.bin', '608.bin', '610.bin', '612.bin', '613.bin', '614.bin', '615.bin', '616.bin', '617.bin', '619.bin', '620.bin', '621.bin', '627.bin', '631.bin', '632.bin', '633.bin', '634.bin', '635.bin', '636.bin', '637.bin', '639.bin', '640.bin', '641.bin', '642.bin', '643.bin', '648.bin', '650.bin', '651.bin', '654.bin', '656.bin', '657.bin', '658.bin', '659.bin', '660.bin', '661.bin', '663.bin', '666.bin', '668.bin', '669.bin', '670.bin', '671.bin', '674.bin', '680.bin', '683.bin', '686.bin', '688.bin', '690.bin', '691.bin', '693.bin', '696.bin', '698.bin', '701.bin', '702.bin', '703.bin', '710.bin', '712.bin', '714.bin', '715.bin', '717.bin', '718.bin', '720.bin', '721.bin', '722.bin', '723.bin', '725.bin', '726.bin', '729.bin', '730.bin', '731.bin', '732.bin', '736.bin', '737.bin', '740.bin', '742.bin', '744.bin', '745.bin', '746.bin', '747.bin', '750.bin', '753.bin', '754.bin', '756.bin', '758.bin', '759.bin', '760.bin', '761.bin', '762.bin', '767.bin', '768.bin', '769.bin', '770.bin', '772.bin', '774.bin', '775.bin', '776.bin', '777.bin', '778.bin', '780.bin', '783.bin', '787.bin', '788.bin', '789.bin', '791.bin', '792.bin', '793.bin', '797.bin', '798.bin', '806.bin', '808.bin', '809.bin', '811.bin', '812.bin', '813.bin', '814.bin', '815.bin', '816.bin', '817.bin', '818.bin', '824.bin', '826.bin', '829.bin', '831.bin', '832.bin', '833.bin', '835.bin', '839.bin', '843.bin', '844.bin', '845.bin', '846.bin', '847.bin', '850.bin', '851.bin', '854.bin', '855.bin', '857.bin', '864.bin', '866.bin', '867.bin', '868.bin', '870.bin', '871.bin', '872.bin', '874.bin', '876.bin', '878.bin', '881.bin', '882.bin', '883.bin', '885.bin', '886.bin', '891.bin', '892.bin', '893.bin', '894.bin', '896.bin', '897.bin', '901.bin', '902.bin', '908.bin', '909.bin', '910.bin', '911.bin', '912.bin', '913.bin', '915.bin', '918.bin', '919.bin', '920.bin', '929.bin', '930.bin', '931.bin', '933.bin', '934.bin', '936.bin', '937.bin', '938.bin', '940.bin', '946.bin', '947.bin', '951.bin', '954.bin', '958.bin', '959.bin', '960.bin', '961.bin', '962.bin', '964.bin', '968.bin', '969.bin', '970.bin', '971.bin', '977.bin', '978.bin', '979.bin', '980.bin', '982.bin', '985.bin', '986.bin', '988.bin', '990.bin', '991.bin', '992.bin', '994.bin', '995.bin', '996.bin', '1001.bin', '1003.bin', '1004.bin', '1005.bin', '1007.bin', '1008.bin', '1010.bin', '1013.bin', '1014.bin', '1015.bin', '1018.bin', '1021.bin', '1026.bin', '1027.bin', '1028.bin', '1029.bin', '1031.bin', '1034.bin', '1035.bin', '1037.bin', '1039.bin', '1040.bin', '1044.bin', '1045.bin', '1046.bin', '1047.bin', '1048.bin', '1050.bin', '1051.bin', '1054.bin', '1056.bin', '1058.bin', '1059.bin', '1060.bin', '1061.bin', '1062.bin', '1064.bin', '1066.bin', '1068.bin', '1069.bin', '1072.bin', '1076.bin', '1079.bin', '1083.bin', '1086.bin', '1089.bin', '1091.bin', '1093.bin', '1097.bin', '1100.bin', '1102.bin', '1103.bin', '1104.bin', '1107.bin', '1108.bin', '1109.bin', '1110.bin', '1112.bin', '1114.bin', '1116.bin', '1118.bin', '1122.bin', '1127.bin', '1129.bin', '1130.bin', '1134.bin', '1135.bin', '1136.bin', '1138.bin', '1139.bin', '1140.bin', '1141.bin', '1142.bin', '1151.bin', '1153.bin', '1154.bin', '1155.bin', '1157.bin', '1159.bin', '1162.bin', '1164.bin', '1167.bin', '1170.bin', '1172.bin', '1174.bin', '1175.bin', '1181.bin', '1182.bin', '1185.bin', '1186.bin', '1189.bin', '1192.bin', '1193.bin', '1195.bin', '1201.bin', '1204.bin', '1206.bin', '1207.bin', '1208.bin', '1209.bin', '1210.bin', '1212.bin', '1213.bin', '1214.bin', '1216.bin', '1219.bin', '1220.bin', '1221.bin', '1222.bin', '1225.bin', '1226.bin', '1227.bin', '1229.bin', '1230.bin', '1232.bin', '1233.bin', '1236.bin', '1238.bin', '1239.bin', '1241.bin', '1243.bin', '1244.bin', '1245.bin', '1246.bin', '1247.bin', '1250.bin', '1251.bin', '1254.bin', '1255.bin', '1258.bin', '1261.bin', '1264.bin', '1265.bin', '1268.bin', '1269.bin', '1271.bin', '1273.bin', '1276.bin', '1280.bin', '1284.bin', '1285.bin', '1288.bin', '1290.bin', '1292.bin', '1296.bin', '1298.bin', '1300.bin', '1301.bin', '1303.bin', '1306.bin', '1307.bin', '1308.bin', '1310.bin', '1313.bin', '1314.bin', '1316.bin', '1317.bin', '1318.bin', '1319.bin', '1321.bin', '1324.bin', '1326.bin', '1331.bin', '1333.bin', '1334.bin', '1337.bin', '1339.bin', '1341.bin', '1342.bin', '1343.bin', '1345.bin', '1346.bin', '1350.bin', '1354.bin', '1357.bin', '1358.bin', '1362.bin', '1364.bin', '1366.bin', '1368.bin', '1369.bin', '1370.bin', '1372.bin', '1374.bin', '1375.bin', '1376.bin', '1377.bin', '1380.bin', '1381.bin', '1385.bin', '1387.bin', '1388.bin', '1391.bin', '1392.bin', '1393.bin', '1396.bin', '1398.bin', '1403.bin', '1404.bin', '1405.bin', '1406.bin', '1408.bin', '1410.bin', '1411.bin', '1415.bin', '1416.bin', '1417.bin', '1418.bin', '1420.bin', '1421.bin', '1422.bin', '1424.bin', '1428.bin', '1429.bin', '1433.bin', '1434.bin', '1435.bin', '1436.bin', '1437.bin', '1442.bin', '1444.bin', '1445.bin', '1446.bin', '1448.bin', '1449.bin', '1450.bin', '1451.bin', '1452.bin', '1454.bin', '1455.bin', '1456.bin', '1458.bin', '1461.bin', '1462.bin', '1465.bin', '1466.bin', '1467.bin', '1472.bin', '1473.bin', '1475.bin', '1476.bin', '1477.bin', '1478.bin', '1479.bin', '1481.bin', '1482.bin', '1485.bin', '1487.bin', '1489.bin', '1490.bin', '1491.bin', '1492.bin', '1493.bin', '1495.bin', '1497.bin', '1498.bin', '1499.bin', '1500.bin', '1503.bin', '1504.bin', '1507.bin', '1510.bin', '1511.bin', '1516.bin', '1517.bin', '1518.bin', '1521.bin', '1522.bin', '1525.bin', '1526.bin', '1527.bin', '1528.bin', '1530.bin', '1533.bin', '1535.bin', '1536.bin', '1538.bin', '1539.bin', '1540.bin', '1544.bin', '1545.bin', '1546.bin', '1549.bin', '1550.bin', '1555.bin', '1561.bin', '1562.bin', '1564.bin', '1565.bin', '1566.bin', '1567.bin', '1569.bin', '1570.bin', '1573.bin', '1574.bin', '1575.bin', '1577.bin', '1578.bin', '1579.bin', '1580.bin', '1582.bin', '1583.bin', '1587.bin', '1594.bin', '1595.bin', '1596.bin', '1597.bin', '1599.bin', '1601.bin', '1606.bin', '1608.bin', '1610.bin', '1612.bin', '1613.bin', '1615.bin', '1616.bin', '1618.bin', '1619.bin', '1621.bin', '1622.bin', '1623.bin', '1624.bin', '1625.bin', '1626.bin', '1628.bin', '1629.bin', '1631.bin', '1632.bin', '1636.bin', '1637.bin', '1638.bin', '1639.bin', '1640.bin', '1641.bin', '1642.bin', '1643.bin', '1644.bin', '1645.bin', '1649.bin', '1650.bin', '1651.bin', '1653.bin', '1655.bin', '1661.bin', '1662.bin', '1663.bin', '1665.bin', '1667.bin', '1668.bin', '1669.bin', '1671.bin', '1672.bin', '1673.bin', '1674.bin', '1675.bin', '1676.bin', '1677.bin', '1681.bin', '1683.bin', '1684.bin', '1686.bin', '1689.bin', '1693.bin', '1695.bin', '1696.bin', '1698.bin', '1699.bin', '1700.bin', '1701.bin', '1706.bin', '1707.bin', '1708.bin', '1709.bin', '1710.bin', '1714.bin', '1717.bin', '1719.bin', '1721.bin', '1722.bin', '1725.bin', '1731.bin', '1732.bin', '1734.bin', '1737.bin', '1740.bin', '1741.bin', '1743.bin', '1744.bin', '1745.bin', '1746.bin', '1749.bin', '1750.bin', '1751.bin', '1752.bin', '1756.bin', '1757.bin', '1758.bin', '1760.bin', '1764.bin', '1765.bin', '1767.bin', '1768.bin', '1770.bin', '1773.bin', '1774.bin', '1776.bin', '1777.bin', '1783.bin', '1787.bin', '1790.bin', '1791.bin', '1793.bin', '1794.bin', '1795.bin', '1797.bin', '1799.bin', '1802.bin', '1804.bin', '1805.bin', '1807.bin', '1808.bin', '1809.bin', '1810.bin', '1811.bin', '1813.bin', '1814.bin', '1815.bin', '1816.bin', '1817.bin', '1818.bin', '1820.bin', '1824.bin', '1830.bin', '1832.bin', '1833.bin', '1838.bin', '1839.bin', '1840.bin', '1843.bin', '1845.bin', '1847.bin', '1849.bin', '1850.bin', '1855.bin', '1859.bin', '1860.bin', '1862.bin', '1865.bin', '1868.bin', '1869.bin', '1871.bin', '1873.bin', '1874.bin', '1877.bin', '1878.bin', '1879.bin', '1880.bin', '1881.bin', '1883.bin', '1884.bin', '1885.bin', '1888.bin', '1890.bin', '1891.bin', '1894.bin', '1895.bin', '1896.bin', '1899.bin', '1901.bin', '1902.bin', '1904.bin', '1909.bin', '1910.bin', '1911.bin', '1912.bin', '1916.bin', '1918.bin', '1920.bin', '1923.bin', '1927.bin', '1928.bin', '1929.bin', '1931.bin', '1932.bin', '1934.bin', '1935.bin', '1936.bin', '1943.bin', '1944.bin', '1945.bin', '1946.bin', '1949.bin', '1950.bin', '1954.bin', '1957.bin', '1959.bin', '1960.bin', '1962.bin', '1964.bin', '1971.bin', '1972.bin', '1974.bin', '1980.bin', '1982.bin', '1986.bin', '1989.bin', '1992.bin', '1996.bin', '1997.bin', '1999.bin', '2002.bin', '2003.bin', '2004.bin', '2005.bin', '2009.bin', '2010.bin', '2014.bin', '2015.bin', '2017.bin', '2020.bin', '2022.bin', '2026.bin', '2028.bin', '2029.bin', '2031.bin', '2032.bin', '2033.bin', '2034.bin', '2035.bin', '2036.bin', '2041.bin', '2044.bin', '2046.bin', '2052.bin', '2053.bin', '2054.bin', '2058.bin', '2059.bin', '2061.bin', '2064.bin', '2067.bin', '2069.bin', '2071.bin', '2072.bin', '2073.bin', '2074.bin', '2075.bin', '2077.bin', '2079.bin', '2080.bin', '2081.bin', '2082.bin', '2083.bin', '2084.bin', '2085.bin', '2086.bin', '2087.bin', '2088.bin', '2094.bin', '2095.bin', '2097.bin', '2098.bin', '2100.bin', '2104.bin', '2105.bin', '2106.bin', '2107.bin', '2109.bin', '2110.bin', '2115.bin', '2117.bin', '2118.bin', '2120.bin', '2122.bin', '2123.bin', '2124.bin', '2125.bin', '2129.bin', '2131.bin', '2136.bin', '2137.bin', '2138.bin', '2140.bin', '2141.bin', '2142.bin', '2148.bin', '2149.bin', '2153.bin', '2154.bin', '2155.bin', '2158.bin', '2162.bin', '2164.bin', '2165.bin', '2167.bin', '2169.bin', '2171.bin', '2175.bin', '2178.bin', '2179.bin', '2182.bin', '2184.bin', '2188.bin', '2190.bin', '2193.bin', '2194.bin', '2195.bin', '2196.bin', '2197.bin', '2200.bin', '2201.bin', '2203.bin', '2207.bin', '2208.bin', '2209.bin', '2212.bin', '2213.bin', '2214.bin', '2215.bin', '2216.bin', '2218.bin', '2220.bin', '2222.bin', '2226.bin', '2227.bin', '2229.bin', '2230.bin', '2232.bin', '2234.bin', '2236.bin', '2237.bin', '2238.bin', '2239.bin', '2240.bin', '2241.bin', '2245.bin', '2246.bin', '2248.bin', '2250.bin', '2251.bin', '2255.bin', '2257.bin', '2259.bin', '2261.bin', '2264.bin', '2274.bin', '2277.bin', '2278.bin', '2279.bin', '2280.bin', '2281.bin', '2283.bin', '2284.bin', '2286.bin', '2289.bin', '2290.bin', '2292.bin', '2296.bin', '2297.bin', '2298.bin', '2301.bin', '2304.bin', '2305.bin', '2306.bin', '2309.bin', '2313.bin', '2316.bin', '2317.bin', '2318.bin', '2322.bin', '2323.bin', '2325.bin', '2329.bin', '2331.bin', '2333.bin', '2334.bin', '2335.bin', '2336.bin', '2339.bin', '2342.bin', '2345.bin', '2348.bin', '2349.bin', '2355.bin', '2357.bin', '2358.bin', '2361.bin', '2364.bin', '2365.bin', '2366.bin', '2368.bin', '2374.bin', '2380.bin', '2382.bin', '2386.bin', '2387.bin', '2389.bin', '2391.bin', '2392.bin', '2393.bin', '2395.bin', '2396.bin', '2397.bin', '2398.bin', '2399.bin', '2400.bin', '2401.bin', '2403.bin', '2404.bin', '2406.bin', '2407.bin', '2408.bin', '2419.bin', '2420.bin', '2422.bin', '2423.bin', '2424.bin', '2425.bin', '2430.bin', '2431.bin', '2433.bin', '2435.bin', '2436.bin', '2437.bin', '2438.bin', '2440.bin', '2441.bin', '2442.bin', '2443.bin', '2445.bin', '2446.bin', '2447.bin', '2449.bin', '2455.bin', '2457.bin', '2459.bin', '2463.bin', '2465.bin', '2466.bin', '2470.bin', '2473.bin', '2476.bin', '2481.bin', '2482.bin', '2486.bin', '2488.bin', '2491.bin', '2492.bin', '2493.bin', '2494.bin', '2496.bin', '2497.bin', '2498.bin', '2500.bin', '2501.bin', '2502.bin', '2503.bin', '2507.bin', '2508.bin', '2516.bin', '2521.bin', '2522.bin', '2523.bin', '2527.bin', '2528.bin', '2529.bin', '2532.bin', '2533.bin', '2536.bin', '2537.bin', '2539.bin', '2547.bin', '2551.bin', '2554.bin', '2555.bin', '2558.bin', '2559.bin', '2560.bin', '2562.bin', '2563.bin', '2566.bin', '2570.bin', '2571.bin', '2577.bin', '2582.bin', '2587.bin', '2589.bin', '2591.bin', '2593.bin', '2596.bin', '2601.bin', '2602.bin', '2606.bin', '2610.bin', '2612.bin', '2614.bin', '2616.bin', '2617.bin', '2618.bin', '2619.bin', '2620.bin', '2623.bin', '2625.bin', '2626.bin', '2630.bin', '2631.bin', '2636.bin', '2638.bin', '2641.bin', '2643.bin', '2655.bin', '2657.bin', '2658.bin', '2661.bin', '2663.bin', '2664.bin', '2665.bin', '2667.bin', '2668.bin', '2671.bin', '2672.bin', '2674.bin', '2675.bin', '2677.bin', '2678.bin', '2679.bin', '2680.bin', '2682.bin', '2684.bin', '2685.bin', '2690.bin', '2691.bin', '2692.bin', '2693.bin', '2694.bin', '2695.bin', '2697.bin', '2698.bin', '2700.bin', '2701.bin', '2702.bin', '2704.bin', '2705.bin', '2707.bin', '2708.bin', '2709.bin', '2713.bin', '2715.bin', '2717.bin', '2718.bin', '2721.bin', '2722.bin', '2723.bin', '2724.bin', '2725.bin', '2726.bin', '2729.bin', '2731.bin', '2732.bin', '2736.bin', '2738.bin', '2739.bin', '2742.bin', '2744.bin', '2745.bin', '2746.bin', '2747.bin', '2751.bin', '2752.bin', '2753.bin', '2755.bin', '2756.bin', '2759.bin', '2760.bin', '2762.bin', '2766.bin', '2771.bin', '2773.bin', '2774.bin', '2777.bin', '2779.bin', '2783.bin', '2784.bin', '2788.bin', '2789.bin', '2790.bin', '2791.bin', '2792.bin', '2794.bin', '2795.bin', '2796.bin', '2797.bin', '2799.bin', '2800.bin', '2803.bin', '2804.bin', '2805.bin', '2806.bin', '2807.bin', '2811.bin', '2812.bin', '2815.bin', '2817.bin', '2818.bin', '2819.bin', '2822.bin', '2824.bin', '2828.bin', '2831.bin', '2839.bin', '2841.bin', '2842.bin', '2845.bin', '2847.bin', '2851.bin', '2852.bin', '2853.bin', '2854.bin', '2856.bin', '2858.bin', '2859.bin', '2862.bin', '2863.bin', '2864.bin', '2866.bin', '2867.bin', '2868.bin', '2870.bin', '2871.bin', '2872.bin', '2873.bin', '2874.bin', '2880.bin', '2881.bin', '2884.bin', '2885.bin', '2888.bin', '2890.bin', '2891.bin', '2892.bin', '2893.bin', '2896.bin', '2898.bin', '2900.bin', '2901.bin', '2902.bin', '2904.bin', '2908.bin', '2909.bin', '2911.bin', '2912.bin', '2914.bin', '2915.bin', '2916.bin', '2919.bin', '2922.bin', '2923.bin', '2924.bin', '2926.bin', '2928.bin', '2932.bin', '2933.bin', '2937.bin', '2940.bin', '2944.bin', '2948.bin', '2953.bin', '2954.bin', '2958.bin', '2959.bin', '2961.bin', '2964.bin', '2965.bin', '2967.bin', '2971.bin', '2973.bin', '2979.bin', '2980.bin', '2981.bin', '2982.bin', '2983.bin', '2989.bin', '2991.bin', '2992.bin', '2994.bin', '2997.bin', '2998.bin', '3000.bin']
for i in files:
gdb.execute('file '+i) # load the binary
gdb.execute('b *0x56555723') # set dummy breakpoint
gdb.execute('run < dummy.txt') # run with empty string
val = gdb.execute('x/wx 0x56557008',to_string=True)
val = int(val[val.rfind('0x'):],16)
arr = gdb.execute('x/2i 0x5655565e',to_string=True).split('\n')
char = int(arr[1][arr[1].rfind('0x'):],16)
count = int(arr[0][arr[0].rfind('0x'):],16)
payload = bytes(chr(char)*count,'utf=8')
payload+= p32(val)
#payload+= struct.pack('L',val) p32 is same as struck.pack()
gdb.execute('c')
gdb.execute('delete') # delete all breakpoints
with open('file.txt','wb') as f: # write the string to a file
f.write(payload)
gdb.execute('run < file.txt') # run with new input
```
3. 64-bit
same is the thing with 64 bit, we first find all the names of the files, then find out the necessary values and then frame our input string and run the file with new input string
```python
import gdb
import struct
files = ['2.bin', '4.bin', '7.bin', '9.bin', '13.bin', '17.bin', '19.bin', '24.bin', '25.bin', '26.bin', '29.bin', '30.bin', '31.bin', '33.bin', '35.bin', '36.bin', '38.bin', '46.bin', '48.bin', '49.bin', '51.bin', '52.bin', '56.bin', '57.bin', '58.bin', '61.bin', '63.bin', '65.bin', '67.bin', '68.bin', '69.bin', '70.bin', '75.bin', '76.bin', '77.bin', '81.bin', '82.bin', '83.bin', '84.bin', '86.bin', '87.bin', '88.bin', '89.bin', '90.bin', '91.bin', '92.bin', '95.bin', '96.bin', '97.bin', '98.bin', '104.bin', '105.bin', '107.bin', '108.bin', '109.bin', '114.bin', '115.bin', '116.bin', '118.bin', '119.bin', '121.bin', '123.bin', '127.bin', '129.bin', '130.bin', '134.bin', '136.bin', '138.bin', '140.bin', '141.bin', '143.bin', '145.bin', '146.bin', '148.bin', '149.bin', '152.bin', '153.bin', '155.bin', '158.bin', '159.bin', '161.bin', '163.bin', '164.bin', '165.bin', '167.bin', '168.bin', '170.bin', '171.bin', '177.bin', '178.bin', '180.bin', '181.bin', '182.bin', '184.bin', '186.bin', '191.bin', '192.bin', '194.bin', '195.bin', '196.bin', '198.bin', '199.bin', '201.bin', '203.bin', '205.bin', '207.bin', '211.bin', '212.bin', '213.bin', '215.bin', '216.bin', '217.bin', '219.bin', '220.bin', '221.bin', '222.bin', '224.bin', '228.bin', '232.bin', '233.bin', '235.bin', '238.bin', '240.bin', '241.bin', '242.bin', '247.bin', '248.bin', '258.bin', '263.bin', '264.bin', '265.bin', '269.bin', '270.bin', '271.bin', '273.bin', '274.bin', '275.bin', '277.bin', '279.bin', '281.bin', '285.bin', '297.bin', '299.bin', '300.bin', '301.bin', '302.bin', '303.bin', '304.bin', '309.bin', '310.bin', '311.bin', '312.bin', '313.bin', '315.bin', '318.bin', '321.bin', '322.bin', '324.bin', '325.bin', '327.bin', '330.bin', '332.bin', '341.bin', '342.bin', '343.bin', '347.bin', '349.bin', '350.bin', '352.bin', '353.bin', '354.bin', '359.bin', '361.bin', '362.bin', '367.bin', '372.bin', '373.bin', '374.bin', '375.bin', '376.bin', '377.bin', '380.bin', '382.bin', '384.bin', '386.bin', '387.bin', '390.bin', '394.bin', '395.bin', '397.bin', '398.bin', '399.bin', '400.bin', '402.bin', '404.bin', '405.bin', '408.bin', '409.bin', '411.bin', '416.bin', '420.bin', '422.bin', '424.bin', '429.bin', '434.bin', '439.bin', '440.bin', '441.bin', '444.bin', '446.bin', '447.bin', '449.bin', '450.bin', '453.bin', '455.bin', '461.bin', '462.bin', '463.bin', '465.bin', '466.bin', '467.bin', '468.bin', '470.bin', '471.bin', '477.bin', '478.bin', '479.bin', '481.bin', '493.bin', '494.bin', '497.bin', '498.bin', '499.bin', '502.bin', '505.bin', '508.bin', '511.bin', '515.bin', '517.bin', '519.bin', '520.bin', '524.bin', '525.bin', '526.bin', '527.bin', '528.bin', '529.bin', '531.bin', '532.bin', '536.bin', '537.bin', '538.bin', '539.bin', '540.bin', '545.bin', '547.bin', '549.bin', '550.bin', '551.bin', '554.bin', '555.bin', '556.bin', '557.bin', '559.bin', '561.bin', '562.bin', '564.bin', '565.bin', '570.bin', '571.bin', '572.bin', '576.bin', '577.bin', '580.bin', '582.bin', '583.bin', '586.bin', '587.bin', '593.bin', '596.bin', '598.bin', '603.bin', '606.bin', '607.bin', '609.bin', '611.bin', '618.bin', '622.bin', '623.bin', '624.bin', '625.bin', '626.bin', '628.bin', '629.bin', '630.bin', '638.bin', '644.bin', '645.bin', '646.bin', '647.bin', '649.bin', '652.bin', '653.bin', '655.bin', '662.bin', '664.bin', '665.bin', '667.bin', '672.bin', '673.bin', '675.bin', '676.bin', '677.bin', '678.bin', '679.bin', '681.bin', '682.bin', '684.bin', '685.bin', '687.bin', '689.bin', '692.bin', '694.bin', '695.bin', '697.bin', '699.bin', '700.bin', '704.bin', '705.bin', '706.bin', '707.bin', '708.bin', '709.bin', '711.bin', '713.bin', '716.bin', '719.bin', '724.bin', '727.bin', '728.bin', '733.bin', '734.bin', '735.bin', '738.bin', '739.bin', '741.bin', '743.bin', '748.bin', '749.bin', '751.bin', '752.bin', '755.bin', '757.bin', '763.bin', '764.bin', '765.bin', '766.bin', '771.bin', '773.bin', '779.bin', '781.bin', '782.bin', '784.bin', '785.bin', '786.bin', '790.bin', '794.bin', '795.bin', '796.bin', '799.bin', '800.bin', '801.bin', '802.bin', '803.bin', '804.bin', '805.bin', '807.bin', '810.bin', '819.bin', '820.bin', '821.bin', '822.bin', '823.bin', '825.bin', '827.bin', '828.bin', '830.bin', '834.bin', '836.bin', '837.bin', '838.bin', '840.bin', '841.bin', '842.bin', '848.bin', '849.bin', '852.bin', '853.bin', '856.bin', '858.bin', '859.bin', '860.bin', '861.bin', '862.bin', '863.bin', '865.bin', '869.bin', '873.bin', '875.bin', '877.bin', '879.bin', '880.bin', '884.bin', '887.bin', '888.bin', '889.bin', '890.bin', '895.bin', '898.bin', '899.bin', '900.bin', '903.bin', '904.bin', '905.bin', '906.bin', '907.bin', '914.bin', '916.bin', '917.bin', '921.bin', '922.bin', '923.bin', '924.bin', '925.bin', '926.bin', '927.bin', '928.bin', '932.bin', '935.bin', '939.bin', '941.bin', '942.bin', '943.bin', '944.bin', '945.bin', '948.bin', '949.bin', '950.bin', '952.bin', '953.bin', '955.bin', '956.bin', '957.bin', '963.bin', '965.bin', '966.bin', '967.bin', '972.bin', '973.bin', '974.bin', '975.bin', '976.bin', '981.bin', '983.bin', '984.bin', '987.bin', '989.bin', '993.bin', '997.bin', '998.bin', '999.bin', '1000.bin', '1002.bin', '1006.bin', '1009.bin', '1011.bin', '1012.bin', '1016.bin', '1017.bin', '1019.bin', '1020.bin', '1022.bin', '1023.bin', '1024.bin', '1025.bin', '1030.bin', '1032.bin', '1033.bin', '1036.bin', '1038.bin', '1041.bin', '1042.bin', '1043.bin', '1049.bin', '1052.bin', '1053.bin', '1055.bin', '1057.bin', '1063.bin', '1065.bin', '1067.bin', '1070.bin', '1071.bin', '1073.bin', '1074.bin', '1075.bin', '1077.bin', '1078.bin', '1080.bin', '1081.bin', '1082.bin', '1084.bin', '1085.bin', '1087.bin', '1088.bin', '1090.bin', '1092.bin', '1094.bin', '1095.bin', '1096.bin', '1098.bin', '1099.bin', '1101.bin', '1105.bin', '1106.bin', '1111.bin', '1113.bin', '1115.bin', '1117.bin', '1119.bin', '1120.bin', '1121.bin', '1123.bin', '1124.bin', '1125.bin', '1126.bin', '1128.bin', '1131.bin', '1132.bin', '1133.bin', '1137.bin', '1143.bin', '1144.bin', '1145.bin', '1146.bin', '1147.bin', '1148.bin', '1149.bin', '1150.bin', '1152.bin', '1156.bin', '1158.bin', '1160.bin', '1161.bin', '1163.bin', '1165.bin', '1166.bin', '1168.bin', '1169.bin', '1171.bin', '1173.bin', '1176.bin', '1177.bin', '1178.bin', '1179.bin', '1180.bin', '1183.bin', '1184.bin', '1187.bin', '1188.bin', '1190.bin', '1191.bin', '1194.bin', '1196.bin', '1197.bin', '1198.bin', '1199.bin', '1200.bin', '1202.bin', '1203.bin', '1205.bin', '1211.bin', '1215.bin', '1217.bin', '1218.bin', '1223.bin', '1224.bin', '1228.bin', '1231.bin', '1234.bin', '1235.bin', '1237.bin', '1240.bin', '1242.bin', '1248.bin', '1249.bin', '1252.bin', '1253.bin', '1256.bin', '1257.bin', '1259.bin', '1260.bin', '1262.bin', '1263.bin', '1266.bin', '1267.bin', '1270.bin', '1272.bin', '1274.bin', '1275.bin', '1277.bin', '1278.bin', '1279.bin', '1281.bin', '1282.bin', '1283.bin', '1286.bin', '1287.bin', '1289.bin', '1291.bin', '1293.bin', '1294.bin', '1295.bin', '1297.bin', '1299.bin', '1302.bin', '1304.bin', '1305.bin', '1309.bin', '1311.bin', '1312.bin', '1315.bin', '1320.bin', '1322.bin', '1323.bin', '1325.bin', '1327.bin', '1328.bin', '1329.bin', '1330.bin', '1332.bin', '1335.bin', '1336.bin', '1338.bin', '1340.bin', '1344.bin', '1347.bin', '1348.bin', '1349.bin', '1351.bin', '1352.bin', '1353.bin', '1355.bin', '1356.bin', '1359.bin', '1360.bin', '1361.bin', '1363.bin', '1365.bin', '1367.bin', '1371.bin', '1373.bin', '1378.bin', '1379.bin', '1382.bin', '1383.bin', '1384.bin', '1386.bin', '1389.bin', '1390.bin', '1394.bin', '1395.bin', '1397.bin', '1399.bin', '1400.bin', '1401.bin', '1402.bin', '1407.bin', '1409.bin', '1412.bin', '1413.bin', '1414.bin', '1419.bin', '1423.bin', '1425.bin', '1426.bin', '1427.bin', '1430.bin', '1431.bin', '1432.bin', '1438.bin', '1439.bin', '1440.bin', '1441.bin', '1443.bin', '1447.bin', '1453.bin', '1457.bin', '1459.bin', '1460.bin', '1463.bin', '1464.bin', '1468.bin', '1469.bin', '1470.bin', '1471.bin', '1474.bin', '1480.bin', '1483.bin', '1484.bin', '1486.bin', '1488.bin', '1494.bin', '1496.bin', '1501.bin', '1502.bin', '1505.bin', '1506.bin', '1508.bin', '1509.bin', '1512.bin', '1513.bin', '1514.bin', '1515.bin', '1519.bin', '1520.bin', '1523.bin', '1524.bin', '1529.bin', '1531.bin', '1532.bin', '1534.bin', '1537.bin', '1541.bin', '1542.bin', '1543.bin', '1547.bin', '1548.bin', '1551.bin', '1552.bin', '1553.bin', '1554.bin', '1556.bin', '1557.bin', '1558.bin', '1559.bin', '1560.bin', '1563.bin', '1568.bin', '1571.bin', '1572.bin', '1576.bin', '1581.bin', '1584.bin', '1585.bin', '1586.bin', '1588.bin', '1589.bin', '1590.bin', '1591.bin', '1592.bin', '1593.bin', '1598.bin', '1600.bin', '1602.bin', '1603.bin', '1604.bin', '1605.bin', '1607.bin', '1609.bin', '1611.bin', '1614.bin', '1617.bin', '1620.bin', '1627.bin', '1630.bin', '1633.bin', '1634.bin', '1635.bin', '1646.bin', '1647.bin', '1648.bin', '1652.bin', '1654.bin', '1656.bin', '1657.bin', '1658.bin', '1659.bin', '1660.bin', '1664.bin', '1666.bin', '1670.bin', '1678.bin', '1679.bin', '1680.bin', '1682.bin', '1685.bin', '1687.bin', '1688.bin', '1690.bin', '1691.bin', '1692.bin', '1694.bin', '1697.bin', '1702.bin', '1703.bin', '1704.bin', '1705.bin', '1711.bin', '1712.bin', '1713.bin', '1715.bin', '1716.bin', '1718.bin', '1720.bin', '1723.bin', '1724.bin', '1726.bin', '1727.bin', '1728.bin', '1729.bin', '1730.bin', '1733.bin', '1735.bin', '1736.bin', '1738.bin', '1739.bin', '1742.bin', '1747.bin', '1748.bin', '1753.bin', '1754.bin', '1755.bin', '1759.bin', '1761.bin', '1762.bin', '1763.bin', '1766.bin', '1769.bin', '1771.bin', '1772.bin', '1775.bin', '1778.bin', '1779.bin', '1780.bin', '1781.bin', '1782.bin', '1784.bin', '1785.bin', '1786.bin', '1788.bin', '1789.bin', '1792.bin', '1796.bin', '1798.bin', '1800.bin', '1801.bin', '1803.bin', '1806.bin', '1812.bin', '1819.bin', '1821.bin', '1822.bin', '1823.bin', '1825.bin', '1826.bin', '1827.bin', '1828.bin', '1829.bin', '1831.bin', '1834.bin', '1835.bin', '1836.bin', '1837.bin', '1841.bin', '1842.bin', '1844.bin', '1846.bin', '1848.bin', '1851.bin', '1852.bin', '1853.bin', '1854.bin', '1856.bin', '1857.bin', '1858.bin', '1861.bin', '1863.bin', '1864.bin', '1866.bin', '1867.bin', '1870.bin', '1872.bin', '1875.bin', '1876.bin', '1882.bin', '1886.bin', '1887.bin', '1889.bin', '1892.bin', '1893.bin', '1897.bin', '1898.bin', '1900.bin', '1903.bin', '1905.bin', '1906.bin', '1907.bin', '1908.bin', '1913.bin', '1914.bin', '1915.bin', '1917.bin', '1919.bin', '1921.bin', '1922.bin', '1924.bin', '1925.bin', '1926.bin', '1930.bin', '1933.bin', '1937.bin', '1938.bin', '1939.bin', '1940.bin', '1941.bin', '1942.bin', '1947.bin', '1948.bin', '1951.bin', '1952.bin', '1953.bin', '1955.bin', '1956.bin', '1958.bin', '1961.bin', '1963.bin', '1965.bin', '1966.bin', '1967.bin', '1968.bin', '1969.bin', '1970.bin', '1973.bin', '1975.bin', '1976.bin', '1977.bin', '1978.bin', '1979.bin', '1981.bin', '1983.bin', '1984.bin', '1985.bin', '1987.bin', '1988.bin', '1990.bin', '1991.bin', '1993.bin', '1994.bin', '1995.bin', '1998.bin', '2000.bin', '2001.bin', '2006.bin', '2007.bin', '2008.bin', '2011.bin', '2012.bin', '2013.bin', '2016.bin', '2018.bin', '2019.bin', '2021.bin', '2023.bin', '2024.bin', '2025.bin', '2027.bin', '2030.bin', '2037.bin', '2038.bin', '2039.bin', '2040.bin', '2042.bin', '2043.bin', '2045.bin', '2047.bin', '2048.bin', '2049.bin', '2050.bin', '2051.bin', '2055.bin', '2056.bin', '2057.bin', '2060.bin', '2062.bin', '2063.bin', '2065.bin', '2066.bin', '2068.bin', '2070.bin', '2076.bin', '2078.bin', '2089.bin', '2090.bin', '2091.bin', '2092.bin', '2093.bin', '2096.bin', '2099.bin', '2101.bin', '2102.bin', '2103.bin', '2108.bin', '2111.bin', '2112.bin', '2113.bin', '2114.bin', '2116.bin', '2119.bin', '2121.bin', '2126.bin', '2127.bin', '2128.bin', '2130.bin', '2132.bin', '2133.bin', '2134.bin', '2135.bin', '2139.bin', '2143.bin', '2144.bin', '2145.bin', '2146.bin', '2147.bin', '2150.bin', '2151.bin', '2152.bin', '2156.bin', '2157.bin', '2159.bin', '2160.bin', '2161.bin', '2163.bin', '2166.bin', '2168.bin', '2170.bin', '2172.bin', '2173.bin', '2174.bin', '2176.bin', '2177.bin', '2180.bin', '2181.bin', '2183.bin', '2185.bin', '2186.bin', '2187.bin', '2189.bin', '2191.bin', '2192.bin', '2198.bin', '2199.bin', '2202.bin', '2204.bin', '2205.bin', '2206.bin', '2210.bin', '2211.bin', '2217.bin', '2219.bin', '2221.bin', '2223.bin', '2224.bin', '2225.bin', '2228.bin', '2231.bin', '2233.bin', '2235.bin', '2242.bin', '2243.bin', '2244.bin', '2247.bin', '2249.bin', '2252.bin', '2253.bin', '2254.bin', '2256.bin', '2258.bin', '2260.bin', '2262.bin', '2263.bin', '2265.bin', '2266.bin', '2267.bin', '2268.bin', '2269.bin', '2270.bin', '2271.bin', '2272.bin', '2273.bin', '2275.bin', '2276.bin', '2282.bin', '2285.bin', '2287.bin', '2288.bin', '2291.bin', '2293.bin', '2294.bin', '2295.bin', '2299.bin', '2300.bin', '2302.bin', '2303.bin', '2307.bin', '2308.bin', '2310.bin', '2311.bin', '2312.bin', '2314.bin', '2315.bin', '2319.bin', '2320.bin', '2321.bin', '2324.bin', '2326.bin', '2327.bin', '2328.bin', '2330.bin', '2332.bin', '2337.bin', '2338.bin', '2340.bin', '2341.bin', '2343.bin', '2344.bin', '2346.bin', '2347.bin', '2350.bin', '2351.bin', '2352.bin', '2353.bin', '2354.bin', '2356.bin', '2359.bin', '2360.bin', '2362.bin', '2363.bin', '2367.bin', '2369.bin', '2370.bin', '2371.bin', '2372.bin', '2373.bin', '2375.bin', '2376.bin', '2377.bin', '2378.bin', '2379.bin', '2381.bin', '2383.bin', '2384.bin', '2385.bin', '2388.bin', '2390.bin', '2394.bin', '2402.bin', '2405.bin', '2409.bin', '2410.bin', '2411.bin', '2412.bin', '2413.bin', '2414.bin', '2415.bin', '2416.bin', '2417.bin', '2418.bin', '2421.bin', '2426.bin', '2427.bin', '2428.bin', '2429.bin', '2432.bin', '2434.bin', '2439.bin', '2444.bin', '2448.bin', '2450.bin', '2451.bin', '2452.bin', '2453.bin', '2454.bin', '2456.bin', '2458.bin', '2460.bin', '2461.bin', '2462.bin', '2464.bin', '2467.bin', '2468.bin', '2469.bin', '2471.bin', '2472.bin', '2474.bin', '2475.bin', '2477.bin', '2478.bin', '2479.bin', '2480.bin', '2483.bin', '2484.bin', '2485.bin', '2487.bin', '2489.bin', '2490.bin', '2495.bin', '2499.bin', '2504.bin', '2505.bin', '2506.bin', '2509.bin', '2510.bin', '2511.bin', '2512.bin', '2513.bin', '2514.bin', '2515.bin', '2517.bin', '2518.bin', '2519.bin', '2520.bin', '2524.bin', '2525.bin', '2526.bin', '2530.bin', '2531.bin', '2534.bin', '2535.bin', '2538.bin', '2540.bin', '2541.bin', '2542.bin', '2543.bin', '2544.bin', '2545.bin', '2546.bin', '2548.bin', '2549.bin', '2550.bin', '2552.bin', '2553.bin', '2556.bin', '2557.bin', '2561.bin', '2564.bin', '2565.bin', '2567.bin', '2568.bin', '2569.bin', '2572.bin', '2573.bin', '2574.bin', '2575.bin', '2576.bin', '2578.bin', '2579.bin', '2580.bin', '2581.bin', '2583.bin', '2584.bin', '2585.bin', '2586.bin', '2588.bin', '2590.bin', '2592.bin', '2594.bin', '2595.bin', '2597.bin', '2598.bin', '2599.bin', '2600.bin', '2603.bin', '2604.bin', '2605.bin', '2607.bin', '2608.bin', '2609.bin', '2611.bin', '2613.bin', '2615.bin', '2621.bin', '2622.bin', '2624.bin', '2627.bin', '2628.bin', '2629.bin', '2632.bin', '2633.bin', '2634.bin', '2635.bin', '2637.bin', '2639.bin', '2640.bin', '2642.bin', '2644.bin', '2645.bin', '2646.bin', '2647.bin', '2648.bin', '2649.bin', '2650.bin', '2651.bin', '2652.bin', '2653.bin', '2654.bin', '2656.bin', '2659.bin', '2660.bin', '2662.bin', '2666.bin', '2669.bin', '2670.bin', '2673.bin', '2676.bin', '2681.bin', '2683.bin', '2686.bin', '2687.bin', '2688.bin', '2689.bin', '2696.bin', '2699.bin', '2703.bin', '2706.bin', '2710.bin', '2711.bin', '2712.bin', '2714.bin', '2716.bin', '2719.bin', '2720.bin', '2727.bin', '2728.bin', '2730.bin', '2733.bin', '2734.bin', '2735.bin', '2737.bin', '2740.bin', '2741.bin', '2743.bin', '2748.bin', '2749.bin', '2750.bin', '2754.bin', '2757.bin', '2758.bin', '2761.bin', '2763.bin', '2764.bin', '2765.bin', '2767.bin', '2768.bin', '2769.bin', '2770.bin', '2772.bin', '2775.bin', '2776.bin', '2778.bin', '2780.bin', '2781.bin', '2782.bin', '2785.bin', '2786.bin', '2787.bin', '2793.bin', '2798.bin', '2801.bin', '2802.bin', '2808.bin', '2809.bin', '2810.bin', '2813.bin', '2814.bin', '2816.bin', '2820.bin', '2821.bin', '2823.bin', '2825.bin', '2826.bin', '2827.bin', '2829.bin', '2830.bin', '2832.bin', '2833.bin', '2834.bin', '2835.bin', '2836.bin', '2837.bin', '2838.bin', '2840.bin', '2843.bin', '2844.bin', '2846.bin', '2848.bin', '2849.bin', '2850.bin', '2855.bin', '2857.bin', '2860.bin', '2861.bin', '2865.bin', '2869.bin', '2875.bin', '2876.bin', '2877.bin', '2878.bin', '2879.bin', '2882.bin', '2883.bin', '2886.bin', '2887.bin', '2889.bin', '2894.bin', '2895.bin', '2897.bin', '2899.bin', '2903.bin', '2905.bin', '2906.bin', '2907.bin', '2910.bin', '2913.bin', '2917.bin', '2918.bin', '2920.bin', '2921.bin', '2925.bin', '2927.bin', '2929.bin', '2930.bin', '2931.bin', '2934.bin', '2935.bin', '2936.bin', '2938.bin', '2939.bin', '2941.bin', '2942.bin', '2943.bin', '2945.bin', '2946.bin', '2947.bin', '2949.bin', '2950.bin', '2951.bin', '2952.bin', '2955.bin', '2956.bin', '2957.bin', '2960.bin', '2962.bin', '2963.bin', '2966.bin', '2968.bin', '2969.bin', '2970.bin', '2972.bin', '2974.bin', '2975.bin', '2976.bin', '2977.bin', '2978.bin', '2984.bin', '2985.bin', '2986.bin', '2987.bin', '2988.bin', '2990.bin', '2993.bin', '2995.bin', '2996.bin', '2999.bin']
for i in files:
gdb.execute('file '+i) # load the binary
gdb.execute('b *0x000055555555488d') # set dummy breakpoint
gdb.execute('run < dummy.txt') # run with empty string
val = gdb.execute('x/gx 0x555555755010',to_string=True)
val = int(val[val.rfind('0x'):],16)
arr = gdb.execute('x/2i 0x0000555555554816',to_string=True).split('\n')
char = int(arr[1][arr[1].rfind('0x'):],16)
count = int(arr[0][arr[0].rfind('0x'):],16)
payload = bytes(chr(char)*count,'utf=8')
payload+= p64(val)
#payload+= struct.pack('qq',val) #p64 is same as struct.pack()
gdb.execute('c')
gdb.execute('delete') # delete all breakpoints
with open('file.txt','wb') as f: # write the string to a file
f.write(payload)
gdb.execute('run < file.txt') # run with new input
```
###### tags: `gdb_scripting`