Writeups

socket(0,2,0) - Reviving modprobe_path again

Finding a new modprobe trigger without AI to solve “greynote” at GreyCTF Finals

kpwn

Some satisfying heap feng shui at 5 am in Nanjing

Pop on an empty std::stack?!

heap c++

Warmup challenge featuring a “number conversion base confusion”.

bof

Exploiting jerryscript in China

browser

Hardest pwn challenge of the CTF. A simple vulnerability lead to a BOF, but the path to RCE was really interesting

bof