Intigriti CTF 2023 Challenge Writeups - Pwn

[@TalsonHacks]

This one's great, learned few new techniques. Thanks for the amazing video writeup!

[@SloppyJoePirates]

Glad you enjoyed it!

[@_CryptoCat]

Thank you!! for making a challenge and also this video, keep up the great work 🙌 Did you know there were 3 other pwn challenges? They could only be unlocked by solving one of the reversing challenges, and I realised late into the CTF they should have been made visible even if locked 😖 A few lessons learnt for next time anyway! Also.. Florida + Japan in one month? I am jealous 😆

[@SloppyJoePirates]

> 3 pwn chals Ha yeah, I didn't see that till near the end of the CTF. I'm excited to see the writeups for them though! > Florida + japan ^^, life is short, if you fly out to Japan between Dec 25th and Jan 23rd we could meet up for a beer/coffee

[@_CryptoCat]

@@SloppyJoePirates ffs yeh there was a note in the description of the rev chall and I posted about it on Twitter but I think a lot of people missed it. For some reason it didn't occur to me that some people will only click on challs from 1-2 categories (as I often do lol) or see the tweet. Next time I would be sure to make them visible, even if locked 🤦‍♂ Damn, I would love that but unless intigriti randomly decide to head to a conference or throw a surprise live hacking event, I think I'm outa luck! We'll catch up in person sometime though 🙂

[@davemonaco1]

There where only a handful solves for the hidden pwn ones. Hope also for some write-ups, but in the meantime I put the "official" write-ups and full code online.

[@_CryptoCat]

@@davemonaco1 that's my bad for making them hidden >.< I discussed with mahmoud whether to make them locked + hidden or locked + visible (they would show as "???" in a new "???" category). Realise now I should have done the latter, will know for next time!

[@davemonaco1]

@@_CryptoCat all good :)

[@pinskiller9914]

19:29 I laughed my ass off for the Maltigriti challenge. "mark all reports as duplicates" LOL

[@SloppyJoePirates]

:)

[@NVTFT]

good job :v keep cooking tks you

[@pinskiller9914]

why p.recv(6) when an address is 8 bytes? and in the video you say it's "16 bytes"?

[@SloppyJoePirates]

Null bytes aren't sent, so we only get 6 bytes of data for an address (normally). We write 0x7fffxxxxxxxx but it's really 8 bytes which would be 0x00007fffxxxxxxxx. And whoops! Should only be 8 bytes for an address

[@pinskiller9914]

@@SloppyJoePirates thank you sir. your videos help me a lot to understand