Firefly_Complete_Combustion
Pwn
No technique tags yet.
hard Elio's script never accounted for untrusted bytecode.
Firefly's Complete Combustion simulator accepts one length-prefixed Lua 5.5.0 binary combat script on each connection. The usual escape hatches are gone, but the bytecode loader still trusts you completely.
author: Mewski
Writeups
Official
No official writeup linked.
Community
Log in to add a community writeup.