pwn

Here's some of my pwn writeups:

Timetable

Is your timetable alright?

Read writeup

Cursed Grimoires

No description for this challenge

Read writeup

Wide Open

Full Green Heap 2.34, how many ways can you find?

Read writeup

One bullet

Very short ROP chain + stack canary

Read writeup

Manipulation

Struct copying leads to UAF + file pwn

Read writeup

Blockchain

Missing line of code results in pwnable linked list implementation

Read writeup

Reporter

Integer overflow results in OOB heap array access

Read writeup

Pokemon Battle

Gary wants to challenge you to a virtual battle. Be sure to choose your pokemon well! Here's an early leak of the game, but you should know that it's incomplete and there's currently no way to win.

Read writeup

Coopy

DIY Vector class cuz why not.

Read writeup

warmup

No description provided

Read writeup

Turbo crypto part 2

Using the key you extracted, we found a [link](https://drive.google.com/uc?id=19mmImjpreALZSs0D88BtLY65cFBkHsMC&export=download) to the source code for turbofastcrypto. There happens to be a secret flag file on the server, and you need to extract it.

Read writeup

Simple

Simple game right?

Read writeup

Malloc

Can you somehow get the flag? Have fun!

Read writeup

Gradebook

My teachers been using a commandline gradebook made by a first year student, must be vulnerable somehow.

Read writeup

Coffee shop

Userspace heap feng shui is too complicated. Here is a peak into kernel heap exploitation. Use your instincts.

Read writeup

Baby heap

Let's get you all warmed up with a classic little 4-function heap challenge, with a twist ofc. static.scythe2021.sdslabs.co/static/babyHeap/libc-2.31.so static.scythe2021.sdslabs.co/static/babyHeap/babyHeap

Read writeup