#!/usr/bin/env python from pwn import * payload = b"A\x00".ljust(104, b"B") + b"A\x00" open("/tmp/payload", "wb").write(payload) p = process("./crackme") # print(p.recv()) p.recvuntil("0x01") p.sendline(payload) p.interactive()