printf("Name: "); gets(name); // <<< vulnerable printf("Password: "); gets(pwd); // <<< vulnerable
The same script works against the remote service (replace HOST and PORT with the challenge endpoint). tokyohot n0541