Write to another variable by overflow

Original writeup (https://github.com/team-bitskrieg/CTF-writeups/tree/master/trendmicro/offensive200).