Tags: pwn 

Rating:

FSB
<span>offset to our addresses = 12+
overwriting fini_array to run main again on exit
overwriting strlen.got with system.plt</span>

Original writeup (http://hamidx9.ir/solutions/2016/tw_mma_ctf/greeting/sol.py).