Newbie pwner, currently learning what people have already mastered...
Not advanced...
Format strings challenges
- FCSC 2022
one shot, no leaks, Full RELRO, input stored on the heap... abuse double stack pointers for the win!
- nullcon CTF 2025
classic fmt challenge
Heap challenges
- nullcon CTF 2025
tcache poisioning into FSOP attack
- Imaginary CTF 2023
house of botcake + FSOP + seccomp
- EHAXCTF 2025
classic heap challenge with rop on the stack
- Sunshine CTF 2023
house of force into malloc hooks
ROP/BOF challenges
- 0x3 CTF 2025
restriected seccomp, call mprotect to fix the permissions of our shellcode and use openat-read-write syscalls
my practice area. inspired by other's work
_dl_fini and __exit_funcs (libc 2.39)
exploiting _wide_data vtable (path=_IO_wfile_overflow) via targetting stdout (libc 2.39)
work in progress...