Exploit an AArch64 stack overflow with ret2csu to leak libc and execute system().
Exploit a stack overflow with canary bypass to ret2win and read the flag.