https://godspeedcurry.github.io/posts/pwnable-kr-syscall/