wustctf2020_closed wustctf2020_closed

打开ida查看

wustctf2020_closed
wustctf2020_closed

 wustctf2020_closed
wustctf2020_closed

 直接获得了权限,但无法查看flag

查看别人师傅博客后发现可以重定向

exec 1&0即可

不足

需要好好研究下linux命令了