/explore
|
You are here 
|
pwning.net | ||
| | | | |
blog.pspaul.de
Last year, @swapgs and I found a fun bug in the popular enterprise VPN solution Zscaler. The VPN client used the pacparser library to decide which HTTP requests to proxied based on a PAC file. |
|
| | | | | ||
| | | | |
karmanyaah.malhotra.cc
[AI summary] This article provides a technical writeup of the author's solutions to several advanced binary exploitation (pwn) challenges during the BCACTF 2022 CTF competition. |
|
| | | | | ||
| | | | |
wachter-space.de
This is a writeup of an easy/medium pwn challenge called "Profile" featuring a type confusion, some GOT overwriting, and a funny but unnecessary one gadget exploit for the fun of it. We are given the following files: main.c profile (binary) Dockerfile docker-compose.yml Let's look at main.c and see if we can spot a vulnerability from the provided source code. #include #include #include #include struct person_t { int id; int age; char *name; }; void get_value(const char *msg, void *pval) { printf("%s", ms... |
|
| | | | | ||
| | | | |
pwning.systems
I'm writing this post because I often hear that kernel exploitation is intimidating or difficult to learn. As a result, I've decided to start a series of basic bugs and exercises to get you started! Prerequisites Knowledge of the Linux command line Knowing how to read and write basic C may be beneficial Being able to debug with the help of a virtual computer or another system Able to install the kernel module compilation build requirements A basic understanding of the difference between userland and kern... |
|
| | | |||
