- 1byte overwrtie in RA & libc_start_main gadget
Dec 31, 2025 · Pwnable, Introduction
- what is cr4 register pinning
Dec 28, 2025 · Pwnable, Kernel
- what is slab ( in-deepth )
Dec 28, 2025 · Pwnable, Kernel
- how to kernel ctf start ( basic setting )
Dec 27, 2025 · Pwnable, How2pwn, Kernel
- pushrbp brush in RTM
Dec 26, 2025 · Pwnable, Introduction
- GFP_KERNEL vs GFP_KERNEL_ACCOUNT
Dec 17, 2025 · Pwnable, Kernel
- what is KASLR
Dec 17, 2025 · Pwnable, Kernel
- nc screen cutting troubleshooting
Dec 4, 2025 · Troubleshooting, Pwnable
- ret2usr template
Dec 2, 2025 · Pwnable, Introduction, Kernel
- what is ret2usr
Dec 2, 2025 · Pwnable, Kernel, How2pwn
- see cmdline when kernel ctf
Dec 2, 2025 · Pwnable, Kernel
- how to make infinity loop by stack_chk_fail
Nov 26, 2025 · Pwnable, Introduction
- data overwrite by setbuf
Nov 26, 2025 · Pwnable, Introduction
- gdb do not work when kernel ctf
Nov 26, 2025 · Troubleshooting, Pwnable, Kernel
- how to use stdout & stdin & stderr to gadget by stack pivoting
Nov 23, 2025 · Pwnable, Introduction
- fflush() can arbitrary readable by FSOP
Nov 23, 2025 · Glibc, Pwnable, Introduction
- bruteforce oneshot when bof
Nov 23, 2025 · Pwnable, Introduction
- call gadget in __libc_csu_init
Nov 23, 2025 · Pwnable, Introduction
- re-resolve in got
Nov 22, 2025 · Pwnable, Introduction
- what is stack pivoting
Nov 22, 2025 · Introduction, Pwnable
- when heap overflow
Nov 21, 2025 · Pwnable, Introduction
- stack garbage leak
Nov 20, 2025 · Pwnable, Stack
- what is heap overlapping
Nov 20, 2025 · Pwnable, Introduction, Heap
- when patch binary
Nov 19, 2025 · Pwnable, Introduction
- how to leak shortcut
Nov 19, 2025 · Pwnable, Shortcut, How2pwn
- when overwrite mastercanary padding
Nov 14, 2025 · Pwnable, Troubleshooting
- rbp rsp poisioning
Nov 14, 2025 · Pwnable, Introduction, How2pwn
- send() vulnerability in socket communication
Nov 13, 2025 · Pwnable, Introduction, Troubleshooting
- how heap load to memory & what is brk & how ASLR work - heap
Nov 6, 2025 · Heap, Pwnable, Introduction
- Linux x86-64 Process virtual memory layout shortcut
Nov 6, 2025 · Shortcut, Pwnable, Glibc
- top chunk consolidation
Nov 5, 2025 · Pwnable, Glibc, Heap
- what is unsorted bin , small bin, large bin → bin ) (deep analyze ) & libc leak
Nov 5, 2025 · Heap, Glibc, Pwnable
- how to change control flow shortcut
Nov 5, 2025 · Pwnable, Introduction, Shortcut
- calloc does not use tcache in ≤2.40
Nov 2, 2025 · Pwnable, Troubleshooting
- what is safe-linking in heap & bypss
Nov 2, 2025 · Pwnable, Heap, Glibc
- fastbin poisioning & dup
Nov 2, 2025 · Pwnable, Heap
- what is tcache key ( tcache dup mitigation ) & bypass
Nov 2, 2025 · Pwnable, Introduction, Heap
- heap Enhanced Security ( each glibc version )
Nov 1, 2025 · Introduction, Pwnable, Heap
- how to watch source code in pwngdb 2 ( deep analyze )
Oct 31, 2025 · Pwnable, Introduction, Troubleshooting
- what is house of apple
Oct 31, 2025 · How2pwn, Pwnable, Introduction
- how to pwn (life hack) shortcut
Oct 29, 2025 · Shortcut, Pwnable, How2pwn
- x86-64 8byte aligned
Oct 29, 2025 · Architecture, Pwnable, Troubleshooting
- _IO_SYSWRITE , _IO_SYSREAD , _IO_overflow , _IO_underflow , _IO_flush diff
Oct 29, 2025 · Glibc, Pwnable
- one_gadget level
Oct 21, 2025 · Pwnable
- gadget diversity
Oct 21, 2025 · Pwnable, Introduction, How2pwn
- glibc got overwrite
Oct 20, 2025 · Introduction, How2pwn, Bypass
- bof by null
Sep 27, 2025 · Pwnable, Introduction
- when can byte patch ( ___stack_chk_fail method )
Sep 25, 2025 · Pwnable
- fsb clear
Sep 23, 2025 · Pwnable
- when socket connection or intend reverse shell in dreamhack problem
Sep 23, 2025 · Pwnable
- io & file fuction shortcut
Sep 23, 2025 · Shortcut, Introduction, Pwnable
- fd is tty socket file in kernel
Sep 23, 2025 · Introduction, Pwnable, Kernel
- scanf() inner buffer vs read() inner buffe
Sep 16, 2025 · Introduction, Pwnable
- what is file inner buffer
Sep 16, 2025 · Introduction, Pwnable
- pwntools recv recvline pitfall
Sep 14, 2025 · Pwnable, Troubleshooting
- what is capability leak ( in fd perspective )
Aug 22, 2025 · Introduction, Pwnable
- how system work
Aug 22, 2025 · Pwnable, Introduction
- system drop privilege when setuid
Aug 22, 2025 · Pwnable
- when libc leak pwnable process
Aug 21, 2025 · Pwnable, Introduction, How2pwn
- how to breakout chroot with root privilege 2 ( In-depth analysis )
Aug 21, 2025 · Pwnable, Bypass
- what is house of force
Aug 20, 2025 · Pwnable, Introduction, Glibc
- what is house of spirit
Aug 20, 2025 · Glibc, Pwnable, Introduction
- what is dup2
Aug 20, 2025 · Pwnable, Introduction
- what is warnx
Aug 20, 2025 · Introduction, Pwnable
- read() pwntools vs tty
Aug 14, 2025 · Pwnable, Introduction
- armel vs armhf
Aug 12, 2025 · Pwnable, Introduction
- what is FSB 2 ( In-depth analysis )
Aug 9, 2025 · Stack, Pwnable, Introduction
- what is va_start in printf
Aug 9, 2025 · Pwnable, Glibc
- SIGSEGV vs -EFAULT
Aug 5, 2025 · Pwnable, Introduction
- what is _IO_FILE_complete
Aug 4, 2025 · Pwnable, Introduction
- what is IO_validate_vtable & _IO_vtable_check & _IO_*_jumps
Aug 4, 2025 · Glibc, Pwnable
- how to bypass IO_validate_vtable by _IO_str_overflow
Aug 4, 2025 · Pwnable, Glibc, Vulnerability
- how to Arbitrary read in fwrite by FSOP
Aug 4, 2025 · Vulnerability, Pwnable, Glibc
- what is _IO_acquire_lock in FSOP
Aug 4, 2025 · Glibc, Pwnable
- glibc struct offset shortcut
Jul 31, 2025 · Shortcut, Pwnable, Reversing
- what is _IO_buf_base & vulnerability
Jul 29, 2025 · Vulnerability, Glibc, Pwnable
- seccomp argument restriction
Jul 28, 2025 · Introduction, Pwnable
- IO file buffer leak
Jul 27, 2025 · Pwnable, Introduction, Heap
- what is _IO_FILE Arbitrary Address Write
Jul 7, 2025 · Pwnable, Vulnerability, Introduction
- how to get glibc debugging sysmbols
Jul 6, 2025 · Introduction, Troubleshooting, Pwnable
- __run_exit_handlers free hook overwrite
Jul 6, 2025 · Introduction, Pwnable, Glibc
- tcachebins & arena free chunk and libc leak
Jul 3, 2025 · Heap, Pwnable
- shortcut when got overwrite & /bin/sh
Jul 2, 2025 · Shortcut, Pwnable
- how to use patchelf
Jun 29, 2025 · Troubleshooting, Pwnable
- what is double free and how it work
Jun 28, 2025 · Heap, Introduction, Pwnable
- how to bypass SIGALRM signal in gdb
Jun 27, 2025 · Pwnable, Troubleshooting, Introduction
- how to change program libc
Jun 27, 2025 · Pwnable, Introduction
- what is tcache chunk
Jun 5, 2025 · Pwnable, Heap, Introduction
- what is master canary & fs_base
Apr 2, 2025 · Introduction, Pwnable, Troubleshooting
- master canary leak & overwrite
Apr 2, 2025 · Pwnable, Introduction
- what is _rtld_global & process exit()
Apr 1, 2025 · Pwnable, Introduction, Vulnerability
- EOF in docker env troubleshooting
Mar 31, 2025 · Troubleshooting, Pwnable
- how to find ROP gadget
Mar 31, 2025 · Introduction, Pwnable
- exploit in local & EOF in remote
Mar 31, 2025 · Troubleshooting, Pwnable
- \x90 slide when shellcode
Mar 31, 2025 · Pwnable, Introduction
- ROP gadget shortcut
Mar 30, 2025 · Shortcut, Pwnable
- one_gadget. constraints analyze & troubleshooting
Mar 30, 2025 · Introduction, Troubleshooting, Pwnable
- what is SFP & FPO
Mar 29, 2025 · Pwnable, Introduction, Stack
- strcpy function null byte vulnerability
Mar 29, 2025 · Pwnable, Introduction, Vulnerability
- what is white space in shellcode & bypass
Mar 28, 2025 · Pwnable, Introduction, Bypass
- how to control stripped binary & __libc_start_main
Mar 27, 2025 · Introduction, Pwnable, Reversing
- Angr with Scanf control
Mar 24, 2025 · Angr, Pwnable, Troubleshooting
- Arm register usage
Mar 22, 2025 · Troubleshooting, Pwnable
- what is mprotect & bypass
Mar 22, 2025 · Troubleshooting, Bypass, Pwnable
- how to execute Arm binary
Mar 21, 2025 · Introduction, Pwnable
- gcc macro & std vulnerability
Mar 20, 2025 · Pwnable, Introduction
- what is _environ
Mar 19, 2025 · Introduction, Pwnable
- _environ troubleshooting
Mar 19, 2025 · Pwnable, Troubleshooting
- Pwntools shortcut
Mar 19, 2025 · Pwnable, Shortcut
- what is FSB
Mar 17, 2025 · FSB, Pwnable, Introduction
- what is ASLR & PIE
Mar 17, 2025 · Pwnable, Stack, Introduction
- how to bypass PIE with stack information
Mar 17, 2025 · Pwnable, Introduction, Bypass
- how to write FSB exlpoit code
Mar 17, 2025 · Pwnable, Introduction
- what is __free_hook
Mar 12, 2025 · Pwnable, Introduction
- what is iofile_vtable
Mar 12, 2025 · Pwnable, Introduction
- what is Heap & how it work
Feb 28, 2025 · Pwnable, Introduction, Heap
- stack align troubleshooting
Feb 28, 2025 · Pwnable, Stack, Troubleshooting
- what is seccomp & bypass
Jan 6, 2025 · Dreamhack, Pwnable, Introduction
- what is netcat
Jan 5, 2025 · Dreamhack, pwn, Pwnable