DiceCTF 2024 Challenge Writeups (3x web, 1x crypto, 1x pwn)

[@nicolegrimpeur]

Just well done, well explained and really useful, thank you!

[@uzi_outrage4986]

amazing description, thank you!

[@elbee1473]

FWIW for your (unused) heap leak attempt in the final challenge you don't need to spend 7+ more allocations by filling up the tcache and leaking a fast chunk. The head of the unsortedbin is stored in the main_arena (libc section) but all the succeeding chunks are of course linked on the heap, so you could actually add another unsorted chunk, free it and when you read the unsorted chunk the fd will be youre libc leak and the bk will be your heap leak

[@SloppyJoePirates]

Oh! D'oh, thank you! That's way easier =P something felt wrong when I was writing that code

[@Rafael-oq9vu]

keep up the awesome work mate

[@CryonGames]

Great walkthrough! Question: are you working on an M1 Mac? I see you are using Docker for pwn challenges and wondered if you managed to achieve a good setup on M1 to solve x86 pwnable challenges through emulation.

[@SloppyJoePirates]

Hey @CryonGames! I'm working on an older Intel Mac :( I heard others had some success using a VM on M1 Mac, def not the best solution

[@kaj1543]

did you find a solution to this?

[@RaynDrop-7777]

Only chal I beat was dice dice goose😭

[@SloppyJoePirates]

Ha, yeah Dice is a hard CTF. It gets easier with time!

[@poiuymnbvc8339]

hey man can i get your discord?

[@SloppyJoePirates]

Sure, it's c0nrad