from pwn import *


os.system("wget http://pwnable.kr/bin/flag")
os.system('upx -d flag')
log.info('unpack finish!')
e = ELF('./flag')
main_addr = e.symbols[b'main']
log.info("main is : " + hex(main_addr))
rodata_addr = e.get_section_by_name('.rodata').header.sh_addr
flag = e.read(rodata_addr, 49).decode()
log.info('FLAG IS : ' + flag[8:])



7628f5d8eaeb25bceec1ef76aff8b46ae0f28c27
<mask token>

<mask token>
os.system('wget http://pwnable.kr/bin/flag')
os.system('upx -d flag')
log.info('unpack finish!')
<mask token>
log.info('main is : ' + hex(main_addr))
<mask token>
log.info('FLAG IS : ' + flag[8:])

<mask token>
os.system('wget http://pwnable.kr/bin/flag')
os.system('upx -d flag')
log.info('unpack finish!')
e = ELF('./flag')
main_addr = e.symbols[b'main']
log.info('main is : ' + hex(main_addr))
rodata_addr = e.get_section_by_name('.rodata').header.sh_addr
flag = e.read(rodata_addr, 49).decode()
log.info('FLAG IS : ' + flag[8:])

from pwn import *
os.system('wget http://pwnable.kr/bin/flag')
os.system('upx -d flag')
log.info('unpack finish!')
e = ELF('./flag')
main_addr = e.symbols[b'main']
log.info('main is : ' + hex(main_addr))
rodata_addr = e.get_section_by_name('.rodata').header.sh_addr
flag = e.read(rodata_addr, 49).decode()
log.info('FLAG IS : ' + flag[8:])

from pwn import *


os.system("wget http://pwnable.kr/bin/flag")
os.system('upx -d flag')
log.info('unpack finish!')
e = ELF('./flag')
main_addr = e.symbols[b'main']
log.info("main is : " + hex(main_addr))
rodata_addr = e.get_section_by_name('.rodata').header.sh_addr
flag = e.read(rodata_addr, 49).decode()
log.info('FLAG IS : ' + flag[8:])


