def change_ld(binary, ld):

    """

    Force to use assigned new ld.so by changing the binary

    """

    if not os.access(ld, os.R_OK): 

        log.failure("Invalid path {} to ld".format(ld))

        return None

        

    if not isinstance(binary, ELF):

        if not os.access(binary, os.R_OK): 

            log.failure("Invalid path {} to binary".format(binary))

            return None

        binary = ELF(binary)

    for segment in binary.segments:

        if segment.header['p_type'] == 'PT_INTERP':

            size = segment.header['p_memsz']

            addr = segment.header['p_paddr']

            data = segment.data()

            if size <= len(ld):

                log.failure("Failed to change PT_INTERP from {} to {}".format(data, ld))

                return None

            binary.write(addr, ld.ljust(size, '\0'))

            if not os.access('/tmp/pwn', os.F_OK): os.mkdir('/tmp/pwn')

            path = '/tmp/pwn/{}_debug'.format(os.path.basename(binary.path))

            if os.access(path, os.F_OK): 

                os.remove(path)

                info("Removing exist file {}".format(path))

            binary.save(path)    

            os.chmod(path, 0b111000000) #rwx------

    success("PT_INTERP has changed from {} to {}. Using temp file {}".format(data, ld, path)) 

    return ELF(path)

#example

elf = change_ld('./pwn', './ld.so')

p = elf.process(env={'LD_PRELOAD':'./libc.so.6'})