Students Bypass School Grader via ASLR

Two students discovered a flaw in their school's remote code execution environment where they bypassed function naming restrictions to call execve. By compiling with ASan and leaking offsets between printf and mmap, they constructed a writable executable page to invoke Linux syscalls. The team reported this possible security issue to the school administration.