Uninitialised variable usage allows for reliable exploitation of a classic stack overflow on a NX and PIE enabled binary using gadgets from the vsyscall page and the magic libc address.
Original writeup (https://nandynarwhals.org/hitbgsec2017-1000levels/).