Try&Try FlagYard — Writeup

Exploit a stack overflow with canary bypass to ret2win and read the flag.