CTF challenges & writeups

21 challenges tagged #off-by-one ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
oboe #kernel #heap-overflow #off-by-one #use-after-free (uaf)#rop #commit-creds #kpti-bypass	DiceCTF 2025 Quals	81.00	Pwn	files wu 1
dicer-visor #vm-escape #hypervisor #shellcode-injection #off-by-one #seccomp #orw	DiceCTF 2023	36.70	Pwn	files wu 1
converter2 #off-by-one #oob-write	TSG 2023	–	Pwn	files wu 3
Cake #off-by-one #rbp-lsb-overwrite #stack-pivot #shellcode	1337UP 2022	22.49	Pwn	files wu 1
DUCTFnote #off-by-one	DownUnderCTF 2021	–	Pwn	files wu 2
Almost #off-by-one	HacktivityCon 2020	21.86	Misc	files wu 1
bf #off-by-one #cpp-string #arbitrary-read-write	RCTF 2020	–	Misc	files wu 1
cancelled #io-file #off-by-one #tcache #heap-exploitation	UTCTF 2020	–	Misc	files wu 3
quotes_list #off-by-one	FireShell 2019	24.49	Misc	files wu 2
babyheap #off-by-one #null-byte-poisoning #malloc-hook	RCTF 2018	–	Misc	files wu 3
stringer #off-by-one #double-free #mmap-chunk #fastbin-attack #malloc-hook	RCTF 2018	–	Misc	files wu 3
pwn02 #off-by-one #null-byte-poisoning #tcache #heap-overlap	WhiteHat 2018 Quals	–	Misc	files wu 3
election #off-by-one #null-byte-poisoning #malloc-hook	SECCON 2017 Quals	30.00	Misc	files wu 3
Refreshments #off-by-one #fastbin-attack #unsorted-bin	StackSmash 2025	24.00	Pwn	files wu 1
limit #off-by-one #tcache-poisoning #overlapping-chunks	smileyCTF 2025	48.61	Pwn	files wu 1
Pwnzoo #off-by-one #function-pointer-overwrite	BSidesSF 2021	23.94	Pwn	files wu 2
duet #off-by-one #largebin-attack #fastbin-attack #fsop #setcontext	0CTF 2020 Quals	–	Pwn	files wu 1
snake #off-by-one #fastbin-attack #malloc-hook	SCTF 2020	–	Misc	files wu 1
BabyFactory #off-by-one #fastbin #unsorted-bin-leak #free-hook	PwnThyBytes 2019	25.00	Misc	files wu 1
BabyHeap #off-by-one #double-free #fastbin-dup #malloc-hook-overwrite	0CTF 2018 Quals	–	Pwn	files wu 1
yawn #off-by-one	InCTF 2018	25.00	Misc	files wu 3

Challenges