Pwning a Lua application via printf()

[Rena <hyperhacker@...>]

https://fail0verflow.com/blog/2014/31c3ctf-pwn30-pong.html

Basically, this is a game set up for people to try to hack into. This
person succeeded by exploiting its misuse of printf()[1] to get hold
of luaL_openlibs() and from there os.execute(). Pretty neat read.

[1] If I'm reading correctly, the bug is in the game's own print()
implementation, and not Lua's standard print(). :-)

-- 
Sent from my Game Boy.