Tags: pwn blackbox 

Rating: 5.0

If we choose (3) and provide an empty string, the program deletes the current status. However this is different from (2), which stops us after a few deletes. This method of deleting status allows us to delete all the way through the list and in the end we get the flag.

Original writeup (https://dowsll.github.io/writeups/polictf2017/statusbox).