pwneasy

stackflag

spbctf

Task: Flag stored in FLAG environment variable, binary has format string vulnerability. Solution: Used %56$s format specifier to leak the flag from the stack where environment variables are stored.

$ ls tags/ techniques/
format_stringstack_leakenvironment_variableprintf
format_string_read
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]