Linux Stack Overflow Ep.6

hmm. it's been a long time but I found this lab in my notes.

your script is amost identical to mine.
except: I'm writing the exploit to a file

FILE *exploit_file = fopen("exploit_input", "wb");
....
close(exploit_file)

and then execut it and pass the larger input file.

 then copy file, execute, get flag