pwnPromedium
Древний замок мага (Ancient Magician Castle)
duckerz
Task: Binary with buffer overflow, NX enabled, no useful ROP gadgets. Solution: SROP (Sigreturn Oriented Programming) with stack pivot to control all registers and execute execve("/bin/sh").
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [pwn][Pro]Luxury (Люкс)— duckerz
- [pwn][Pro]Hospital (Больница)— duckerz
- [pwn][Pro]Говори - и будет исполнено (ask_and_you_shall_receive)— hackerlab
- [pwn][Pro]В отеле (At the Hotel)— duckerz
- [pwn][Pro]Easy ROP— hackerlab