pwnProeasy

Piece of cake

hackerlab

Task: 64-bit PIE ELF with fgets reading 128 bytes into a 64-byte global buffer, adjacent to a password variable checked by strcmp. Solution: overflow the input buffer to overwrite the adjacent good_pass variable with the expected string, triggering get_shell() which calls system(/bin/sh).

$ ls tags/ techniques/
buffer_overflowpiex86_64strcmpfgetsno_canarynxfull_relroglobal_variable_overwriteadjacent_buffers
adjacent_global_buffer_overflowstrcmp_bypass_via_overwriteret2win_via_condition
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups