pwneasy

Upcoming Flight (Предстоящий полет)

duckerz

Task: 64-bit ELF binary with format string vulnerability in printf(user_input) and global variable controlling flag access. Solution: Use format string write (%n) to overwrite has_ticket variable in .bss section, then trigger arrive() function to get the flag.

$ ls tags/ techniques/
format_stringbss_overwriteglobal_variable
format_string_writearbitrary_write
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]