Exploit

tag: Exploit

ECW 2023: Centralized Memory (write-up)

7 Nov, 2023 by Maxime Turlure

#ECW 2023

Centralized Memory was a hard Linux pwn challenge created for the European Cyber Week CTF 2023 qualifiers. This write-up covers the intended method of exploitation through a race condition, an AES padding bug and a stack overflow.

ECW 2023: The Calculator in Shadow (write-up)

7 Nov, 2023 by Anthony REMY

The Calculator in Shadow was a hard pwn challenge created for the European Cyber Week CTF 2023 qualifiers. It included exploiting a RISC-V calculator running on top of a customized QEMU that featured a poorly implemented shadow stack.

ARM TrustZone: pivoting to the secure world

24 Mar, 2023 by Anonymous

#Android

#Exploit

#Vulnerability Research

Discovery of two vulnerabilities in secure world components
Exploitation to get code execution in a trusted driver, while not having a debugger for this obscure environment
Leverage of aarch32 T32 instruction set to find nice stack pivots
Turning an arbitrary write into an arbitrary code execution

Remote Deserialization Bug in Microsoft's RDP Client through Smart Card Extension (CVE-2021-38666)

10 Dec, 2021 by Valentino Ricotta

#RDP

#Exploit

#CVE

#Vulnerability Research

#RCE

This is the third installment in my three-part series of articles on fuzzing Microsoft’s RDP client, where I explain a bug I found by fuzzing the smart card extension.

Remote ASLR Leak in Microsoft's RDP Client through Printer Cache Registry (CVE-2021-38665)

10 Dec, 2021 by Valentino Ricotta

#RDP

#Exploit

#CVE

#Vulnerability Research

#ASLR

This is the second installment in my three-part series of articles on fuzzing Microsoft’s RDP client. I will explain a bug I found by fuzzing the printer sub-protocol, and how I exploited it.

ECW 2021 - WriteUp

25 Oct, 2021 by Thalium team

For the European Cyber Week CTF 2021 Thalium created some challenges in our core competencies: reverse and exploitation. This blog post presents some of the write-ups:

Chest (36 solve) - reverse
FSB as a service (3 solve) - exploitation
WYSIWYG (3 solve) - reverse
Pipe Dream (1 solve) - reverse
- the author posted his solution on his personal blog

Thalium’s challenges have been less resolved than others. They were not that difficult, but probably a bit more unexpected. A few additional challenges designed by Thalium are: