pwnProeasy

Sleep

spbctf

Task: get the flag from a binary that sleeps 1024 seconds before printing it. Solution: overflow the input buffer to overwrite the sleep_time integer variable with zero, bypassing the delay entirely.

$ ls tags/ techniques/
buffer_overflowinteger_overwritesleep_bypasstiming
integer_variable_overwritesleep_bypassnull_byte_overwrite
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups