pwneasy

Baby bof

uoftctf2026

Task: Buffer overflow with strlen() length check bypass. Solution: Start payload with NULL byte to make strlen() return 0, then overflow to ret2win with stack alignment.

$ ls tags/ techniques/
buffer_overflowgetsstrlen_bypassnull_byteret2win
strlen_null_bypassstack_alignmentret2win
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]