pwnhard

Task Manager

tamuctf

Task: Heap buffer overflow in linked list task manager with full protections (PIE, RELRO, Canary). Solution: Overflow next pointer to chain through taskPointer struct, leak stack/libc/binary addresses, write ROP chain to return address, bypass double-free by overwriting global size variable to -1 (wraps to 0 after increment).

$ ls tags/ techniques/
pieheap_overflowtcachefull_relrolinked_listglibc_2.36canary
heap_buffer_overflowret2libcrop_chainpie_bypasslibc_leakstack_leaklinked_list_manipulationglobal_variable_overwritedouble_free_bypass
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]