Tags: pwn mbr 

Rating:

Out of bounds write vulnerability, allow us to overwrite function pointers in a function table to leak the flag.

Original writeup (https://daniellimws.github.io/ctfs/midnight-sun-quals-19/hfs-dos/hfs-dos).