heap based challenge with tcache (no execve)
Unsorted bin leak -> off by one bug -> consolidation backwards -> tcache poisoning -> rop on the heap, lol

https://f4d3.io/inception_thc/