</h1> <p>For this challenge, you are given a shell as an unprivileged user. You can talk with another 'server' process through unix message queues (msgget, msgsnd, msgrcv).</p> <p>The only process that can read the flag runs as the 'flag' user, but it also communicates with this 'server' process.</p> <p>You have to exploit the server and then exploit the flag client to get the flag.</p> <p>The bugs are kindof interesting.</p>