Tags: bof pwn 

Rating:

warmming up ret2text. ASLR is enabled, so need leak libc first.

[full writeup](http://note.taqini.space/#/ctf/MidnightsunCTF-2020/?id=pwn1-70pt)

Original writeup (http://note.taqini.space/#/ctf/MidnightsunCTF-2020/?id=pwn1-70pt).