Tags: canary format-string ret2win pie i386 unintended-solution 

Rating: 5.0

Buffer overflow, ret2win challenge. 32 bit with arguments required. PIE Enabled, Canary enabled w/format string leak.

Challenge had unintended solutions bypassing most of the hard work.

Solutions for all Intro to PWN: [https://ctf.rip/write-ups/pwn/bluehens-2022/#pwn8](https://ctf.rip/write-ups/pwn/bluehens-2022/#pwn8)

Original writeup (https://ctf.rip/write-ups/pwn/bluehens-2022/#pwn8).