pwnProeasy

Upcoming Flight (Предстоящий полет)

duckerz

Task: 64-bit ELF binary with format string vulnerability in printf(user_input) and global variable controlling flag access. Solution: Use format string write (%n) to overwrite has_ticket variable in .bss section, then trigger arrive() function to get the flag.

$ ls tags/ techniques/
format_stringbss_overwriteglobal_variable
format_string_writearbitrary_write
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups