Conversation

hackerlab

Task: an ELF64 PIE binary with NX and Full RELRO exposes both a format string in the name prompt and a stack overflow in the description prompt, while the embedded flag string is fake. Solution: leak &allowance with the 45th %p, recover the PIE base, then ret to the success branch at base + 0x1489 to print the real remote flag.