pwnProeasy
echo counter
spbctf
Task: Binary with buffer overflow adjacent to a pointer used in increment operation. Solution: Overflow buffer to corrupt pointer to point to is_admin global variable, then the *ptr += 1 operation sets is_admin to 1, granting access to the flag.
$ ls tags/ techniques/
write_what_where_via_increment
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [pwn][Pro]Easy Overflow 3— spbctf
- [pwn][Pro]Admin— spbctf
- [pwn][Pro]fptr— spbctf
- [pwn][Pro]sptr— spbctf
- [pwn][Pro]rbp— spbctf