All Posts

Using eval inside an eval to build a python code using chr function

Using $0 to spawn a shell, then using od to convert output to decimal, then parsing the output.

Overflowing a buffer in a pointer which overwrites the pointer, giving us an arbitrary read, then utilizing pointer dereferencing to leak libc value from GOT and performing a simple ret2libc.

Given a libc leak, perform a ret2libc on ARM64.

Bypassing Seccomp rules and instructions check to read the flag file. No mov, no syscall/int 0x80, sysenter allowed.