This is probably the easier way of solving the challenge; indeed, this is exactly how my team did it. However, there's a somewhat more interesting solution, exp

This is probably the easier way of solving the challenge; indeed, this is exactly how my team did it. However, there's a somewhat more interesting solution, exploiting a badly implemented doubly-linked list: https://blog.skullsecurity.org/2014/defcon-quals-writeup-for-shitsco-use-after-free-vuln https://blog.skullsecurity.org/2014/defcon-quals-writeup-for...