Skip to content

Latest commit

 

History

History

bookshelfv2

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Description

The shop has been removed until further notice.

Difficulty

4.5/10

Flag

PCTF{r0p_l34k_1st!!1!_16719345}

Hints

No hint

Author

Dylan Knoff (elbee)

Tester

Dylan

Writeup

same as first version but shop has been removed. two rop chains must be sent, the first calls puts with puts for a leak and returns to adminBook with the right parameter set, the second is the exploit.

Given to user

  • bookshelf
  • libc.so.6

To-do

  • Containerize