Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
crash-report.txt is generated from the FLAG injected at startup. Select the SIGSEGV/fault_offset record and XOR-decrypt stack_after_offset with training-stack-canary to recover the flag.
Inspect crash-report.txt and identify the target record
select the SIGSEGV/fault_offset record and XOR-decrypt stack_after_offset with training-stack-canary
Verify that the reconstructed value has FLAG{...} format