Rating: 0

TLDR: this was a heap challenge and I didn't use the heap. See [full writeup](https://github.com/SPRITZ-Research-Group/ctf-writeups/tree/master/0x00ctf-2017/pwn/babyheap-200).

giantbranch – Dec. 25, 2017, 2:48 p.m.

Are there any other solutions?I try to use unlink and write one_gadget to malloc_hook,but failed~