#off-by-one CTF challenges

21 CTF challenges using off-by-one from 17 CTFs (2017–2025), 21 with writeups. Mostly Misc (52%) and Pwn (48%).

Misc · 11 Pwn · 10

Often combined with

#malloc-hook 4 #fastbin-attack 4 #null-byte-poisoning 3 #double-free 2 #tcache 2 #shellcode 1 #rbp-lsb-overwrite 1 #stack-pivot 1 #function-pointer-overwrite 1 #orw 1 #hypervisor 1 #shellcode-injection 1 #seccomp 1 #vm-escape 1 #free-hook 1

Challenges

Filter and sort these in the challenge browser →