$ cat writeup.md…
$ cat writeup.md…
pwn_spbctf
Task: 64-bit NON-PIE ELF picks a secret first name via srand(time(NULL)) + rand()%20 and gives the flag if you strncmp-match it. Solution: reimplement glibc's actual TYPE_3 additive-feedback rand() in Python, seed it with the current UNIX second at connect time, predict rand()%20, and send the matching name from the known 20-name table.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar