BOF + ROP + libc leak + system('/bin/sh') - Cyber Apocalypse 2023 - pwn/pandora

CTF Writeup Video
00:00 Intro
00:46 Running the binary
01:30 Ghidra
02:11 Checksec
03:18 Whiteboard Solution
11:23 Solve Script
20:40 Flag

[@markuche1337]

Thank you the whiteboard is useful learnt new things again 😊

[@ismailarame3756]

it's very useful keep it like this learning a lot from you

[@karmzkomy2047]

Great teachings as always, just recommended my whole class to follow and watch your videos

[@SloppyJoePirates]

Haha thank you. If your class ever gets stuck on a chal, just let me know and I'll give it a shot and try to make walkthrough

[@ToasteR1032]

Hi, great video! any chance you could share the Dockerfiles used in your "make" commands (In this video kali-pwner and ubuntu-pwner) or the "make" shell function (?) in general?

[@SloppyJoePirates]

Definitely! I made a video about those (docker/make), which includes the dockerfile in the description: kzbin.info/www/bejne/bpm4m5eIoN6cZ7M

[@ToasteR1032]

@@SloppyJoePirates very nice, thanks!

[@shahabhosseini4939]

as a beginner i watched the video several times but still i didn't understand how did you exploit that D

[@SloppyJoePirates]

Haha oh no. Is there something in particular that was confusing?

[@markuche1337]

Please make videos for pwn picoctf 🤲 After it ends

[@SloppyJoePirates]

:( I was planning on doing picoCTF writeups, but I've been a little frustrated with the competition. I just finished another pwn chal and found out they're not using the same binary on local and remote, which is not a fair nor fun challenge for beginners (you have to jump to a specific offset). I want to love pico, but I think I'm going to boycott this year.

[@markuche1337]

@@SloppyJoePiratesOh alright thanks But I think the last one is a heap pwn challenge

[@SloppyJoePirates]

@@markuche1337 hmm, okay, i'll take a quick peak

[@SloppyJoePirates]

sweet, solved it last night (locally). pico said no writeups till the 30th, so it'll be posted then!

[@markuche1337]

@@SloppyJoePirates Thank you 😊