Rating:
Partial Overwrite to get a format stringLeak php base adressRopchain in phpdup stdout/stdin to network FDspawn /bin/sh[Full writeup](https://fascinating-confusion.io/posts/2022/07/htb-business-ctf-22-superfast-writeup/)
I don't remember