Tags: tcache-dup oob shellcode 

Rating:

intended solution here

unintended solution, reflections, etc. here

Original writeup (https://152334h.github.io/writeup/2021/08/09/Getting-things-wrong-How-I-spent-24-hours-on-a-beginners-CTF-pwn.html).