Don't Crash

Stealth binary exploitation. Each challenge forks: the judge runs as root, holds the flag, and reveals it only if the unprivileged child does both:

1. exits cleanly with status 0
2. makes the file pwned contain this run's secret 32-byte nonce.

The nonce is fresh per run and reaches the child only on file descriptor 3.