pwn4 rabbit_2 (shellcoding)

pwn_spbctf

Task: PIE C++ shellcoding challenge that runs attacker shellcode under SECCOMP_MODE_STRICT, with the flag pre-loaded into one of 100 mmap'd linked-list nodes. Solution: rbp-relative shellcode that walks the singly linked list (syscall-free traversal), matches the SPBCTF node, and exfiltrates it with write+exit only — the only syscalls strict seccomp permits.