Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
A vulnerable SUID C binary with protections disabled is provided. Exploit its buffer overflow to redirect control flow into a hidden function.
Analyze the binary with gdb to find the vulnerable function and buffer size
Use objdump or nm to find the address of the win function
Craft a payload that overwrites the return address after the correct padding length