pwnPromedium

New year show

grodno_new_year_2026

Task: Holiday workshop binary with a helper registration system where the wish field in a 136-byte structure can overflow into the adjacent structure. Solution: Registered two helpers, overflowed the first helper's wish field (75 bytes + p32(1)) to overwrite the second helper's is_santa flag, then logged in as the promoted helper to access the flag.

$ ls tags/ techniques/
structure_field_overwriteprivilege_escalation_via_overflow

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups