pwnPromedium
bad_mood
grodno_new_year_2026
Task: Heap-based note manager binary with an off-by-one bug and an admin check function that compares a hash against itself. Solution: Ignored the red herring heap vulnerability and simply called the check_admin function (menu option 5), which always passes because admin_hash is computed from the same admin_key at startup.
$ ls tags/ techniques/
source_code_analysislogic_flaw_exploitation
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [pwn][Pro]Secrets— grodno_new_year_2026
- [pwn][Pro]Name— grodno_new_year_2026
- [pwn][Pro]New year party— grodno_new_year_2026
- [pwn][Pro]Хранилище заметок (Notes Store)— hackerlab
- [pwn][Pro]Taste— grodno_new_year_2026