For both the victim deployment and the call to kill you don’t define what address you are using so in both case you are using the default address. So the déployer and the caller are the same, so the msg.sender == owner check passes since they are the same address.

Pyr f you call kill from any other addresses then your if condition will protect your contract

For both the victim deployment and the call to kill you don’t define what address you are using so in both case you are using the default address. So the déployer and the caller are the same, so the msg.sender == owner check passes since they are the same address.

If you call kill from any other addresses then your if condition will protect your contract