Ret2dlresolve in 64bit binaries

Ret2dlresolve is a really powerful tecnique to use in pwn challenges (even tho it’s not frequently seen). It’s useful when we don’t have libc leaks or don’t know the libc version.

June 12, 2024 · leo_something · 0 views

CodegateJunior24 - Baby Heap

Heap challenge from the Codegate quals for juniors of 2024. The vulnerability was an heap overflow that enabled an attacker to gain overlapping chunks, therefore arb read and write.

June 3, 2024 · leo_something · 0 views

OpenECSC Round 3 - Log4x86

This challenge comes from the 3rd round of openECSC 2024. The challenge was really really interesting: the exploitation tecnique involved a buffer overflow through a really short format string vulnerability.

May 25, 2024 · leo_something · 0 views

DestructiveFarm setup for A/D CTFs

DestructiveFarm is a popular tool used in CTFs and what it does is running exploits every tick to retrieve flags and automatically submit them to the checker.

April 19, 2024 · team bhackari · 0 views

Tulip setup for A/D CTFs

Tulip is a traffic analyzer tool made for A/D CTFs, this post walks you throught all the important steps requied to deploy Tulip painlessly (hopefully).

April 19, 2024 · leo_something · 0 views