mischard

GhostDB

0ops_ctf

Task: V-lang database with BSTree and quota limiting operations to 60001, but goal requires 114514 affected_rows. Solution: Exploit bug in V-lang BSTree deletion that loses entire subtree when deleting a node with two children, achieving ~120000 affected_rows with single delete.

$ ls tags/ techniques/

vlang bstree stdlib_bug binary_search_tree data_structure balanced_tree node_deletion affected_rows

V-lang BSTree deletion bug exploitationBalanced tree construction for maximum impactQuota constraint bypass via implementation bug

Analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

$ python3 exploit.py --target 192.168.1.1 --port 8080
[*] Connecting to target...
[+] Shell obtained!

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]