stringzz

Binary Exploitation - Points: 300

The binary has a format string vulnerability, since user input is directly passed into printf. This enables us to read on the heap where the flag lies around.

Format string: %37$s

flag: picoCTF{str1nG_CH3353_166b95b4}