leak canary using format string, use the buffer overflow to overwrite the canary with itself and jump to flag function
[Writeup](https://github.com/yuvaly0/CTFs/blob/master/2020_angstrom/Canary_DONE/Canary.md)