pwnPromedium
Want the flag?
spbctf
Task: convince a binary with anti-cheat detection that you want the flag by matching a checker variable to a hardcoded string. Solution: use LD_PRELOAD to inject a constructor that overwrites the checker variable at its known address with the target string before the comparison runs.
$ ls tags/ techniques/
ld_preload_injectionruntime_memory_modificationtiming_based_bypass
π
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [reverse][Pro]Deceptive Checkerβ miptctf
- [pwn][Pro]Easy Overflow 3β spbctf
- [reverse][Pro]Constβ spbctf
- [pwn][Pro]Π‘ΡΡΠ°Π½Π½ΡΠΉ PWN?β hackerlab
- [pwn][Pro]Mic Check β getflagβ spbctf