[Equinor 2021]I think we have a roof leak.
| ID： | 13651 |
|---|---|
| 标题： | [Equinor 2021]I think we have a roof leak. |
| 描述： | The printf function in expects one or more parameters. In the man page its defined as: `int printf(const char *format, ...);` If the first (and only) argument is a pointer string without any formating options it just prints the string. But what happens if we only have one argument, that is user controlled? The [man](https://man7.org/linux/man-pages/man3/printf.3.html) page can be a good place to start. `nc {{host}} {{port}}` flag使用NSSCTF{}格式提交。 |
| 类型： | PWN |
| 网站： | NSSCTF |
| 题目链接： | https://www.nssctf.cn/problem/6506 |
| 赛事： | Equinor |
| 年度： | 2021 |
| Flag值： | EPT{we've_got_a_blackhawk_down_we've_got_a_blackhawk_down_i_mean_apache} |
| writeup： | https://github.com/benprov718/EquinorCTF21-writeups |