Latest

Utilizing an out-of-bound write to leak Libc and gain rbp/rip control and get shell using one_gadget

Utilizing an out-of-bound write to gain RIP control and then use a gadget to perform execve syscall

Utilizing Out-of-bounds write to overwrite an adjacent memory chunk to bypass login and using Format String Vulnerability to overwrite a check and overwrite return address on the stack to perform ROP.

Creating pwn challenges for different OS/arch from scratch, and deploying it remotely using Docker.

Utilizing double free to create a fake chunk in the BSS section of the ELF and freeing the chunk into the unsorted bin by using Unsorted Bin Attack to leak libc and overwrite __free_hook.