Tags: pwn ret2syscall 

Rating:

ret2syscall exploit
there two methods
writing to .bss
or write to a register

i used the second method as the first one is known

Original writeup (https://github.com/raouf-005/Hackfest-2k24-writeup/tree/main/static).