ctf-writeups

This is a PoC exploit for a double free vulnerability in a binary. The exploit creates overlapping chunks on the heap, manipulates heap metadata, and overwrites the mallochook with a one-gadget address to execute /bin/sh. The challenge is interesting because it does not allow the exploitation of...

From the crash to the getshell 0ctf2019_plang detailed explanation-vulnerability warning-the black bar safety net

! This is 0ctf in a subject, the subject provides a poc file var a = "This is a PoC!" System. printa var b = 1, 2, 3 b0x80000000 = 0x123 We in ida in strings can be found in the following code: ! As can be seen this is similar to a javascript interpreter. gdb to load the program and set the...