Incorrect written offset

[bannsec]

In an example on picoCTF 2018, it appears this tool incorrectly identifies the "already written" value as 25 instead of 0.. You can manually override this, but need to figure out why it came to this conclusion.

auth.zip