pwneasy

Простой калькулятор (Simple Calculator)

duckerz

Task: Calculator binary with array index bounds check only for upper limit. Solution: Use negative array index to overwrite puts@GOT with system() address, then trigger shell via greet function.

$ ls tags/ techniques/
got_overwritenegative_indexlibc_leakret2libcarray_oob
got_plt_hijacknegative_array_indexlibc_offset_calculation
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]