Rating:

Partial Overwrite to get a format string Leak php base adress Ropchain in php dup stdout/stdin to network FD spawn /bin/sh Full writeup

Original writeup (https://fascinating-confusion.io/posts/2022/07/htb-business-ctf-22-superfast-writeup/).