Pwnable Challenges

• 2017 Meepwn anotherarena
  • not working yet
• 2017 HUST RR2L
  • solved but not working yet
• 2017 HUST wind
  • solved but not working yet
• 2017 0ctf babyheap
  • x86-64 | FULL RELRO | NX | PIE
  • heap (overlay fast bin and small bin)
• 2017 0ctf EasiestPrintf
  • TODO: there is execution problem
  • i386 application running on debian
  • FSB
  • printf malloc, free condition (width)
• 2017 BostonKeyParty memo
  • x86-64 | FULL RELO | NX
  • heap (fast bin)
  • logic bug to leak the libc address
• 2016 openCTF tyro_heap
  • i386 | NX
  • heap buffer overflow
  • overwrite function pointer
• 2017 0ctf diethard
  • x86-64 | NX
  • custom heap (?)
• 2016 bctf bcloud
  • i386 | NX
  • heap (House of force)
  • leak by got overwritten
• 2017 RCTF aiRcraft
  • amd64 | NX | PIE | Partial Relro
  • Heap Exploit
  • double-free
  • use-after-free
  • overwritten function ptr
• 2017 h3x0r mic for pwn
  • i386 | NX | SSP
  • Format String Bug (FSB)
  • Leak memory by SSP
• 2017 bugsbunny Pwn50
  • Simple Pwnable Challenge
• 2017 bugsbunny Pwn100
  • i386
  • return to shellcode
• 2017 bugsbunny Pwn150
  • x86_64 simple stack bof
  • gdb : set follow-fork-mode [child | parent]
• 2017 bugsbunny Pwn200
  • overwrite got
• 2017 bugsbunny Pwn250
  • 64bit One-shot gadget
  • rdi, rsi, edx
• 2017 bugsbunny Pwn300
  • tired to make the shellcode.... :(
  • 64bit shellcode
  • Alphanumeric shellcode
• 2017 SHA Megan-35
  • Megan-35 encoder
  • FSB
  • one-shot gadget in 32bit libc
• 2017 SHA Echo Service
  • amd64 | FULL RELRO | NX | SSP | PIE
  • Object-c
  • FSB (but Object-c version)
  • construct fake frame
• 2015 32C3 teufel
  • Virtual Memory Privilege
  • Stack overflow/underflow
• 2015 MMA RPS
  • overwrite random seed
  • Pwntools(ctypes)
• 2017 TWCTF Just Do It
  • 32bit ELF
  • overwrite local variable
• 2017 Asis Mrs. Hudson
  • 64bit ELF
  • 64bit ROP Gadget
• 2017 Asis Greg Lestrade
  • 64bit ELF
  • integer overflow
  • format string
• 2017 hack.lu - bit
  • x86_64 ELF
  • mprotect
  • call table
• 2017 hack.lu - exam
  • x86_64 ELF
  • House of Einherjar
• 2017 hack.lu - HeapHeaven
  • x86_64 ELF
  • leak using FD in heap
  • overwrite malloc hook