Tags
In an era where LLM agents have started solving CTFs automatically, how do you design a challenge that "machines struggle with but a skilled human solves in a reasonable time"? This organizes the anti-LLM design principles that target the structural limits of transformers — state tracking, carry propagation, tokenization, and context loss.
Read full articleKongju National University Gifted Center pwnable2 challenge — patching a Sleep NOP to print the flag instantly.
Read full articleSolving CSAW 2013 Exploitation 2 (200 points) by sending a buffer and a secret, then overwriting RET with a buffer overflow.
Read full articleWalkthrough of the "alert(1) to win" XSS challenge.
Read full articleA writeup for RITSEC CTF 2021's baby WASM challenge, covering WebAssembly bytecode reversing, the WASM memory model, and flag extraction.
Read full articleA hands-on look at the AArch64 calling convention, Link Register control, and ROP chain construction for CTF-style exploitation
Read full articleA practical guide to using angr for CTF binary analysis: symbolic execution basics, find/avoid strategies, setting up symbolic registers and stack arguments, and solving crackmes automatically
Read full articleWriteups for SUA CTF 2019 challenges in the pwn and reversing categories.
Read full articleWriteups for HackCTF's pwn category: basic BOF, format string bugs, heap exploitation (tcache), RTL chaining, and x64 buffer overflow.
Read full articleA step-by-step breakdown of a V8 OOB exploit: type confusion, addrOf/fakeObj primitives, and WASM RWX shellcode execution
Read full articleSolutions to picoCTF 2018 pwn and assembly challenges: a buffer overflow series, x86 assembly puzzles, and shellcode execution.
Read full articleSolving DEF CON 23's babycmd: command injection via blacklist bypass on a 64-bit Linux binary, with a shell-escape technique.
Read full articleSolving DEF CON 22 CTF Qualifier's r0pbaby: leaking the shared library base, finding gadgets via PLT/GOT, and building a 64-bit ROP chain to call system().
Read full articleA classic Plaid CTF 2013 challenge: a ret2libc / ROP chain exploit against a 32-bit Linux binary.
Read full article