| ID： |
13652 |
| 标题： |
[Equinor 2021]Please call 1-500-WIN to get the flag! |
| 描述： |
You might have heard of buffer overflows, but do you know how to exploit them?
The goal of this challenge is to overwrite `main`''s return pointer which is stored on the stack, with the address of the win() function. There are several good (and bad) tutorials on how to do this online. Googeling for example `ret2win` or `binary exploitation buffer overflow` might be a good place to start.
My personal favorite is the [Binary Exploitation / Memory Corruption](https://youtube.com/playlist?list=PLhixgUqwRTjxglIswKp9mpkfPNfHkzyeN) playlist by [LiveOverflow](https://twitter.com/LiveOverflow). [Buffer Overflows can Redirect Program Execution - bin 0x0D](https://youtu.be/8QzOC8HfOqU) goes in to detail on how to redirect redirect program execution, but it might be a good idea to watch the playlist from the start if you dont have previous knowledge on the topic.
`nc {{host}} {{port}}`
flag使用NSSCTF{}格式提交。 |
| 类型： |
PWN |
| 网站： |
NSSCTF |
| 题目链接： |
https://www.nssctf.cn/problem/6507
|
| 赛事： |
Equinor |
| 年度： |
2021 |
| Flag值： |
EPT{we've_got_a_blackhawk_down_we've_got_a_blackhawk_down_i_mean_apache} |
| writeup： |
https://loevland.github.io/posts/EquinorCTF21/
|
