Tokyohot N0541 [top]

printf("Name: "); gets(name); // <<< vulnerable printf("Password: "); gets(pwd); // <<< vulnerable

The same script works against the remote service (replace HOST and PORT with the challenge endpoint). tokyohot n0541