1. `,`: read a character and write it at *sa2. `.`: write *sa at *str, then increment *str3. `[`: if *sa is zero, jump to the next ]4. `]`: if *sa is not zero, jump to the previous [str is at 0x404078, while STR is at 0x404ca0.
We can make use of the 4 operators discussed to write the payload `,[,.]`
This reads in a character to *sa, then while *sa is not zero, keep reading in characters and writing it to str. Eventually, we can write HELLO\n at STR, then terminate the write by sending in a null byte.