pwnmedium
VIP User
spbctf
Task: obtain VIP status to access the flag in a user management system. Solution: register two users, then overflow the first user's info field (50 bytes, no bounds check) to corrupt the adjacent second user's VIP flag, then login as the second user to get the flag.
$ ls tags/ techniques/
struct_overflowadjacent_structure_corruptionmulti_step_exploitation
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Create a free account with GitHub, then upgrade to Pro.
$ssh [email protected]