#stack-overflow

TryHackMe PWN101: Stack Buffer Overflow into a Local Variable

How an unbounded gets() call lets input spill out of a 50 byte stack buffer and overwrite the integer the program uses to decide whether you deserve a shell. Static analysis, offset math from the disassembly, local and remote exploitation with pwntools, and why NX, PIE and Full RELRO did nothing to stop it.