pwnPromedium
В отеле (At the Hotel)
duckerz
Task: Hotel binary with user management system. Solution: Use-After-Free vulnerability - delete user without nullifying pointer, reallocate same chunk via message write to overwrite role field, call hidden menu option to get flag.
$ ls tags/ techniques/
use_after_freedangling_pointerheap_chunk_reusehidden_option_discovery
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [pwn][Pro]Luxury (Люкс)— duckerz
- [pwn][Pro]Говори - и будет исполнено (ask_and_you_shall_receive)— hackerlab
- [pwn][Pro]Hospital (Больница)— duckerz
- [pwn][Pro]Taste— grodno_new_year_2026
- [pwn][Pro]Upcoming Flight (Предстоящий полет)— duckerz