double free -> stdout -> leak -> hook

Original writeup (https://ex-origin.github.io/2019/08/06/De1CTF2019/#Weapon).