5 min read
DEF CON 23 CTF Qualifier: babycmd
Solving DEF CON 23's babycmd: command injection via blacklist bypass on a 64-bit Linux binary, with a shell-escape technique.
Read full articleTags
defcon
5 min read
DEF CON 22 CTF Qualifier: r0pbaby
Solving DEF CON 22 CTF Qualifier's r0pbaby: leaking the shared library base, finding gadgets via PLT/GOT, and building a 64-bit ROP chain to call system().
Read full article