CTF challenges & writeups

132 challenges in family ⊕ pwn:other ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
blindsight #blind-rop #brop #stack-buffer-overflow	Defcamp 2022	–	Pwn	files wu 2
memory-hole #v8-exploit #array-oob #jit-spray #sandbox-bypass	DiceCTF 2022	24.82	Pwn	files wu 1
Detour #fini-array-overwrite	NahamCon 2022	24.61	Pwn	files wu 3
babyfile #fsop #file-structure #io-obstack-jumps	SECCON 2022 Quals	97.90	Pwn	files wu 2
coffee_maker #ret2libc #got-overwrite #custom-compression	UMassCTF 2022	23.56	Pwn	files wu 1
KrampusGifts #race-condition #tcache #heap-exploitation #multithreading	X-MAS 2022	–	Pwn	files wu 1
santascomplainthotline #rop #stack-buffer #ret2libc	X-MAS 2022	–	Pwn	files wu 1
Cache_of_Castaways #cross-cache-overflow #cred-overwrite	corCTF 2022	24.92	Pwn	files wu 1
CoRJail #off-by-null #kernel-uaf #container-escape	corCTF 2022	24.92	Pwn	files wu 1
solidarity #solana-account-confusion #missing-signer-check	corCTF 2022	24.92	Pwn	files wu 1
one_byte #call-gate	hxp 2022	–	Pwn	files wu 2
sandbox_share #macos-xpc-exploitation #sandbox-escape	ALLES 2021	–	Pwn	files wu 1
ShellMaster2 #alphanumeric-shellcode #restricted-shellcode #rwx	Aero 2021	35.17	Pwn	files wu 1
A_Fun_Game #memory-editing #cheat-engine #dotnet-mono	BCACTF 2021	–	Reverse	files wu 1
Advanced_Math_Analysis #strcmp-null-byte-bypass	BCACTF 2021	–	Pwn	files wu 2
cold #c++-decompression #oob-read-write #small-string-optimization #rop	CSAW 2021 Quals	20.54	Pwn	files wu 1
PostOffice #forensics #telegram-api	DaVinciCTF 2021	24.50	Pwn	files wu 1
magic-marker #stack-buffer-overflow #struct-overwrite #ret2win	DamCTF 2021	24.43	Pwn	files wu 3
Back_to_the_Lab_2 #labview-reversing #vi-block-diagram #network-protocol	DawgCTF 2021	23.29	Pwn	files wu 1
Back_to_the_Lab_3 #labview-reversing #bit-rotation #binary-patching	DawgCTF 2021	23.29	Reverse	files wu 1
SiceSiceBaby #heap #off-by-one-null #tcache #glibc	DiceCTF 2021	24.82	Pwn	files wu 1
metatalk #cve-2021-31439	HITCON 2021	–	Pwn	files wu 1
Happy_the_Boss #memory-editing	HeroCTF 2021	35.17	Pwn	files wu 1
Secure_OCaml_Sandbox #ocaml-sandbox-escape #callback-register #type-confusion	PlaidCTF 2021	99.64	Pwn	files wu 2
The_Cobol_Job #use-after-free (uaf)#libcob #free-hook #proc-self-maps	PlaidCTF 2021	99.64	Pwn	files wu 1
Pokemon #tcache-stashing-unlink #heap-overflow #null-byte-bypass	RCTF 2021	–	Pwn	files wu 1
ezheap #alignment-overflow #negative-index #out-of-bounds (oob)	RCTF 2021	–	Pwn	files wu 1
musl #musl-heap #meta-corruption #orw #seccomp	RCTF 2021	–	Pwn	files wu 2
sharing #shared-ptr #refcount-underflow #use-after-free (uaf)	RCTF 2021	–	Pwn	files wu 1
unistruct #stdvariant #iterator-invalidation #use-after-free (uaf)	RCTF 2021	–	Pwn	files wu 1
warmnote #musl-heap #null-byte-overflow #meta-corruption #stack-pivot	RCTF 2021	–	Pwn	files wu 2
OhBabyBaby #stack-buffer-overflow #ret2win #leaked-address	S4CTF 2021	24.52	Pwn	files wu 2
seccon_tree #python-sandbox-escape #c-extension	SECCON 2021	–	Pwn	files wu 1
death_note #heap-overflow #fd-overwrite #libc-leak	Securinets 2021 Quals	41.71	Pwn	files wu 1
Calculator #arp-spoofing #meet-in-the-middle (mitm)	TAMUctf 2021	–	Pwn	files wu 3
NX_Oopsie #shellcode #executable-stack	TAMUctf 2021	–	Pwn	files wu 1
Jump_Is_Easy #ret2dlresolve #bof #x86-64	UMDCTF 2021	–	Pwn	files wu 1
BabyRe #crackme #anti-disassembly #ncurses	Zh3r0 2021	–	Reverse	files src wu 2
Wall_of_Perdition #kernel-exploit #msg-msg #cred-overwrite	corCTF 2021	24.92	Pwn	files wu 1
fire_of_salvation #kernel-uaf #msg-msg #cred-overwrite	corCTF 2021	24.92	Pwn	files wu 1

Challenges