lun4t1c@home:~$

接收泄露数据

32 位程序

address = u32(io.recvuntil('\xf7')[-4:])
log.success('address -> ' + hex(address))

64 位程序

address = u64(io.recvuntil('\x7f')[-6:].ljust(8, '\x00'))
log.success('address -> ' + hex(address))