# pwntools ## Memory Addresses of ELF Binary * Find address of function and use it on $eip ```python p = process() elf = ELF() __function = elf.symbol. payload = fit({ 42: __function # Length measured via cyclic }) p.sendline() proc.interactive() ```