```[*] '/DEFCON_CTF_2019/speedrun009/speedrun-009'    Arch:     amd64-64-little    RELRO:    Full RELRO    Stack:    Canary found    NX:       NX enabled    PIE:      PIE enabled```
use fsb, leak libc address, canary, pie address
and trigger bof vuln to go to oneshot
[Full exploit](https://github.com/wotmd/CTF_Exploit/tree/master/DEFCON_CTF_2019/speedrun009)