https://hynseok.github.io/posts/pwnable-pwnable-syscall/