gdb bin200

bin200.txt

gdb ./bin200

set follow-fork-mode child
break main
break *0x08048df6                                 # lea
run 10000
set *(unsigned char*)0x8048bdd = 0x74  # break on main, jne -> je
step

# start a new shell and `echo test | nc localhost 10000`

# type mulitple 's' in gdb until hit the following break point
Breakpoint 2, 0x08048df6 in main ()

# find password
(gdb) x/s $eax
0x804c008:	"4bb0ab166697482644c7145e91717cb2"