Tags: buffer_overflow format_string 

Rating:

leak canary using format string, use the buffer overflow to overwrite the canary with itself and jump to flag function

[Writeup](https://github.com/yuvaly0/CTFs/blob/master/2020_angstrom/Canary_DONE/Canary.md)