~ posts tags
pwn
2024
2 posts
02-10
DiceCTF 2024 Quals -- boogie-woogie
boogie-woogie was a pwn challenge in DiceCTF 2024 Quals with a .data relative byte swap primitive.
01-13
Battelle @ Shmoocon 2024 -- Time Jump Planner
Time Jump Planner was a pwn challenge from the Battelle booth at Shmoocon 2024. It was a stack buffer overflow challenge with a shadow stack to prevent ROP. Exploitation uses "GOT Oriented Programming", a code-reuse technique which works by chaining together gadgets terminating in a call to a GOT entry.
2022
2 posts
03-13
UTCTF 2022
I cleared pwn in UTCTF 2022 with the Texas A&M Cybersecurity club placing in 23rd :) There were three challenges -- an automatic exploit challenge, a stack bof+fmt string vuln, and unchecked write kernel driver.
01-07
Battelle Winter CTF 2022 -- Holy Grail of ROP
Holy Grail of ROP was an automatic exploitation challenge in the 2022 Battelle Winter CTF. It provided five randomly generated vulnerable binaries and players needed to solve each within a timeout to get the flag.