Introduction to Pico2024 C3
Let's dive into the details surrounding Pico2024 C3. Reverse engineering a custom encryption algorithm written in python that encodes characters based on the difference between ...
Pico2024 C3 Comprehensive Overview
picoCTF 2024 capture the flag competition: Uses a printf format string vulnerability to change the GOT.PLT entry for puts to point to system instead. from pwn import * r ... This is a use-after-free vulnerability. If we free the variable and then do a malloc of the same size (rounded to the next multiple of 4 ...
Uses robots.txt to find the uploads folder and upload a PHP webshell ...
Summary & Highlights for Pico2024 C3
- Artificially injected cross-site scripting vulnerability (XSS) in a website. Was able to get around the policy by using an experimental ...
- Uses sha256sum to compute a hash of each file in a directory. grep is used to search for a particular file. Backticks `` are used to ...
- We are able to encode and decode arbitrary RSA messages EXCEPT the one we want (password.enc, which we'll call m). So we ...
- Used git checkout to checkout 3 different branches of a git repository. Combining those 3 files gives us the flag!
- Was able to write past the end of a heap variable to change the value of another heap variable.
That wraps up our extensive overview of Pico2024 C3.