pwnmedium

В отеле (At the Hotel)

duckerz

Task: Hotel binary with user management system. Solution: Use-After-Free vulnerability - delete user without nullifying pointer, reallocate same chunk via message write to overwrite role field, call hidden menu option to get flag.

$ ls tags/ techniques/
heapuafuse_after_freetcachehidden_menustructure_overwrite
use_after_freedangling_pointerheap_chunk_reusehidden_option_discovery
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]