$ cat writeup.md…
$ cat writeup.md…
avitoctf
Task: A FastAPI host runs trusted and attacker-uploaded WebAssembly modules, then trusts their exported pointers. Solution: Abuse an unchecked i64 export and deterministic Wasmtime memory placement to make a raw ctypes read disclose the trusted instance's static secret.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar