pwnPromedium

Forging

spbctf

Task: overflow a buffer to overwrite four magic integer values containing null bytes. Solution: exploit a custom read_n function that reads byte-by-byte and does not stop on null bytes, allowing injection of values with embedded \x00 via little-endian packing.

$ ls tags/ techniques/
buffer_overflownull_byte_injectioncustom_readmagic_values
null_byte_injectioncustom_read_exploitationlittle_endian_encoding
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups