| ID: | 2062 |
|---|---|
| 标题: | Admin Service |
| 描述: | Notes: Leak everything using /proc/self/maps . Use updateConfig function to gain an arbitrary write. There is no upper bound check for the index. Write a shellcode/gadget in executeable area. Toggle the execution of the "backupCall" by writing "backup: 1" to the config. Execute backup. |
| 类型: | PWN |
| 网站: | bugku |
| 题目链接: | https://ctf.bugku.com/challenges/detail/id/2209.html |
| 赛事: | SecurinetsQualsCTF2023 |
| 年度: | 2023 |
| Flag值: | 无 |
| writeup: | https://blog.csdn.net/weixin_52640415/article/details/132154636 |