easyshell

from pwn import*
from LibcSearcher import *
#p=remote("node4.buuoj.cn",)
p=process("./babyheap")
context.log_level="debug"
libc=ELF('libc.so')
elf=ELF('babyheap')

p.recvuntil('captcha is: ')
cap=p.recv(8)
p.sendlineafter('the captcha: ',cap)
#p.sendlineafter(
#p.sendlineafter('Please Select: ',)


def add(index,size):
	p.sendlineafter('Please Select: ','1')
	p.sendlineafter('Index: ',str(index))
	p.sendlineafter('Size: ',str(size))
	
def fill(size,content):
	p.sendlineafter('Please Select: ','3')
	p.sendlineafter('Size: ',str(size))
	p.sendlineafter('Content: ',content)


gdb.attach(p)
sleep(1)
add(20,0x60)


p.interactive()