#!/usr/bin/env python from pwn import * n = 6 values = [] p = log.progress(f"bruteforcing {n} random numbers") while len(values) < n: for i in range(100): with context.quiet: conn = process("./vuln") conn.recvline() for v in values: conn.recvuntil(b"guess?") conn.sendline(str(v).encode()) conn.sendline(b"0") p.status(f"i = {i:03}, {values}...") conn.recvuntil(b"guess?") conn.sendline(str(i+1).encode()) conn.recvline() result = conn.recvline() with context.quiet: conn.close() if b"win" in result: values.append(i+1) break p.success(f"values are {values}")