/challenge/pwn/bof-stack/vuln is a setuid-root binary with no stack canary and no PIE. It reads up to 256 bytes into a 64-byte stack buffer. Overwrite the saved return address to reach the win function, which prints the contents of /flag (your per-user instance flag).
Submit the flag through the dojo interface to solve the challenge.