cyber tuna

My ramblings and notes on binary analysis and general software security

Pwnable.kr uaf

Sat 24 October 2020

In this post, I'm going to walk through my solution to the "UAF" challenge from pwnables.kr, a pretty cool wargame site run by the SSLab at Georgia Tech. I picked out this challenge because I was interested in learning more about C++ exploitation, and right off the bat it …

Continue reading »

Pwnable.tw Challenge 1 - Start

Sat 13 June 2020

The first challenge from pwnable.tw, as the name of the site suggests, is a pwnable CTF challenge. The goal of the challenge is to pop a shell in the remote service and read out the flag, which we've been instructed should reside at '/home/start/flag'. The binary running …

Continue reading »