# illusion * stack BOF * Partial RELRO * possible GOT overwrite ? * exit at last no overwrite return address => no canary check * no fsb * use scanf ```c= void main_1211(void) { long in_FS_OFFSET; char local_28 [24]; undefined8 canary; canary = *(undefined8 *)(in_FS_OFFSET + 0x28); init_iobuf_1189(); printf("Hello, what is your name?\n"); __isoc99_scanf("%s",local_28); printf("Nice to meet you\n"); puts(local_28); printf("Anything you want to say to us?\n"); __isoc99_scanf("%s",local_28); printf("We recieved your message\n"); puts(local_28); printf("Goodbye\n"); /* WARNING: Subroutine does not return */ _exit(0); } ``` ###### tags: `unsolved`