Smash - TokyoWesterns CTF 2020 Cyb0rG 2020-09-22 Pwn / CET tl;dr Leak with Format String bug. Use the arbitrary heap pointer write to overwrite __GI__IO_file_jumps. Inject shellode in heap and get code execution in dfprintf. Read More Exploitation Format String CET BOF TokyoWesterns CTF