$ cat writeup.md…
$ cat writeup.md…
spbctf
Task: heap menu allocator with UAF read — freed chunks still printed via %s, leaking unsorted bin fd pointer (main_arena+0x60). Solution: allocate large chunk (>tcache), free to unsorted bin, read leaked libc pointer, compute setvbuf address.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar