voidsecurity

The binary allocates memory using mmap as below: mmap(NULL, 12288, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, 0, 0) = 0x7ffff7ff3000 ...

This challenge is about python pickle. The remote script fetches the flag as below: class Flag(object): def __init__(self): ...

My solutions for Flare-On reversing challenges is here FireEye published some statistics in there blog - Official Solutions an...

EBP is a simple 32 bit ELF with NX disabled. Its an echo server with format string vulnerability. Data received using fgets is pas...

As the title says, this bug is useful only for post exploitation to bypass protections when the attacker already has arbitrary PHP...

Defcon Quals 2014 Shitsco was an interesting challenge. There were two vulnerability in the binary - strcmp information leak and ...

Binary implements a circular linked list to store key:value pair. Each chunk is 32 bytes which looks like below struct node{ ...

Exploitation 4 was a 32 bit ELF without NX protection. The binary implements a custom allocator using sbrk. Each chunk holds a met...

The binary allows to set key:value pair and retrieve them using the key. Values are copied into bss area and key is stored in heap...

The binary makes 2 mmap() calls. One region is RWX into which user supplied shellcode is copied and executed. Flag is copied into ...

Exploitation 1 was a 32 bit ELF without NX protection. The vulnerability is a buffer overflow in stack using echo command during s...