Faible Ty Réseau is a basic heap-like challenge, it allows us to create a configuration, edit it, call a function pointer on it and finally to free it:
123456789101112131415161718192021222324252627282930313233343536373839int __cdecl main(int argc, const char **argv, const char **envp){ int v4; // [rsp+4h] [rbp-Ch] BYREF unsigned __int64 v5; // [rsp+8h] [rbp-8h] v5 = __readfsqword(0x28u); while ( 1 ) { puts(aVousN); printf(a1ModifierLesPa, argv); fflush(stdout); v4 =...
Intro
Epreuve 12-3 – Coffre En tant que stagiaire vous avez accès aux locaux de la NSB. Vous allez collecter des informations dans les locaux. Un coffre est présent dans les locaux en salle rideau. Il appartient à Richard Cresus de la Tune. Essayez d’ouvrir ce coffre. Quel est l’IBAN contenu dans le coffre ? Format de la réponse : IBAN sans séparateur.
Basically, we have to crack open an electronic safe. It’s locked with an electromagnet and requires a pin to open, moreover it prints an id ...
CloudInspectCloundInpect was a hypervisor exploitation challenge I did for the Hack.lu event.I didn’t succeed to flag it within the 48 hours :(. But anyway I hope this write up will be interesting to read!The related files can be found right here
After Whiterock released it’s trading bot cloud with special Stonks Sockets another hedge fund, Castel, comes with some competition. The special feature here is called “cloudinspect”.The flag is located right next to the hypervisor. Go get it!
Vuln...
Hello folks ! Here is a write up for the two first pwn challenges of the ASIS CTF.You can find the related files here.
justpwnitjustpwnit was a warmup pwn challenge. That’s only a basic stack overflow.The binary is statically linked and here is the checksec’s output:
123456[*] '/home/nasm/justpwnit' Arch: amd64-64-little RELRO: Partial RELRO Stack: No canary found NX: NX enabled PIE: No PIE (0x400000)
Morever the source code is provided as it is t...