pwnmedium

Древний замок мага (Ancient Magician Castle)

duckerz

Task: Binary with buffer overflow, NX enabled, no useful ROP gadgets. Solution: SROP (Sigreturn Oriented Programming) with stack pivot to control all registers and execute execve("/bin/sh").

$ ls tags/ techniques/
buffer_overflowsropstack_pivotsigreturn
sropstack_pivotrax_control_via_read
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]