pwnPromedium
hxp 39C3 CTF - brainfast
hxp_39c3
Task: exploit a Brainfuck JIT compiler running on Alpine Linux (musl libc). Solution: leverage the out-of-bounds pointer access (initial pointer is outside the tape) to write shellcode into memory where the JIT buffer will be allocated, then trigger JIT compilation to execute it.
$ ls tags/ techniques/
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [pwn][Pro]iz_heap_lv1 — BSS-pointer overlap + tcache poisoning— spbctf
- [pwn][Pro]pwn9_mc4 — Mic Check: leak and pwn!— spbctf
- [pwn][Pro]pwn10_nosoeasy — No-So-Easy: tcache poison → GOT overwrite— spbctf
- [pwn][Pro]Taste— grodno_new_year_2026
- [pwn][Pro]secret_v2 — format string without %n— spbctf