pwneasy

echo counter

spbctf

Task: Binary with buffer overflow adjacent to a pointer used in increment operation. Solution: Overflow buffer to corrupt pointer to point to is_admin global variable, then the *ptr += 1 operation sets is_admin to 1, granting access to the flag.

$ ls tags/ techniques/
write_what_where_via_increment

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]