(File Struct Exploits) level 1
Information category: pwn Description Harness the power of FILE structs to arbitrarily read data. Write-up Goal: using an arbitrary write / memory-write primitive to corrupt a FILE (_IO_F...
hackering true
(File Struct Exploits) level 6
Information category: pwn Description Abuse built-in FILE structs to bypass a security check. Exploit from pwn import * elf = context.binary = ELF("/challenge/babyfile_level6") global p ...
(File Struct Exploits) level 5
Information category: pwn Description Abuse built-in FILE structs to leak sensitive information. Exploit from pwn import * elf = context.binary = ELF("/challenge/babyfile_level5") global...
(File Struct Exploits) level 4
Information category: pwn Description Harness the power of FILE structs to arbitrarily read/write data to hijack control flow. Exploit from pwn import * elf = context.binary = ELF("/chal...
(Dynamic Allocator Exploitation) level 1
Information category: pwn Description Leverage consolidation to obtain the flag. Write-up Tcache holds up to 7 freed chunks of a given size. Do: allocate N chunks of size S, then free()...
(Dynamic Allocator Misuse) level 18
Information category: pwn Description Revisit a prior challenge, now with TCACHE safe-linking. Write-up House of Force to pivot malloc into the stack. Exploit from pwn import * elf = co...
(Dynamic Allocator Misuse) level 17
Information category: pwn Description Revisit a prior challenge, now with TCACHE safe-linking. Write-up House of Force to pivot malloc into the stack, and a compact XOR-index → stack pivo...
(Dynamic Allocator Misuse) level 15
Information category: pwn Description Leverage TCACHE exploits to obtain the flag. Write-up Goal: leak a return address from the stack, compute PIE base, pivot malloc so a chunk points a...
(Dynamic Allocator Misuse) level 13
Information category: pwn Description Leverage calling free() on a stack pointer to read secret data. Write-up Goal: manipulate heap metadata to perform an overwrite of a secret value st...
(Dynamic Allocator Misuse) level 12
Information category: pwn Description Leverage TCACHE exploits to cause malloc() to return a stack pointer. Write-up Goal: leak a stack address, pivot malloc to return a pointer into sta...