Project Sekai - ✅-pwn-echo2

echo2 - 500 points

Category: Pwn Description: New and improved echo? nc echotwo.wolvctf-2023.kctf.cloud 1337 Files:

Tags: opz#9839, Medium/Hard, gsgx#8240

Sutx pinned a message to this channel. 03/17/2023 7:49 PM

@Zafirr wants to collaborate

single byte overwrite -> back to main and leak at the same time ROP -> change rbp with leave or pop rbp -> jump back to inside echo to leak libc -> jump back to main again

19:55

then ROP like usual

@4n0nym4u5 wants to collaborate

you want to do this? @4n0nym4u5

20:04

im really lazy

@Piers wants to collaborate

20:09

@Johnathan Huu Tri wants to collaborate

Zafirr

you want to do this? @4n0nym4u5

I have an exam so I'm in college

gl!

no source

20:39

i can never use their dockerfile for some reasons

lol

@hfz wants to collaborate

@Piers u doing this?

21:11

if not ill do it

yeah im trying it

alright

@Zafirr do hardware w me

okay

i have literally 0 knowledge on it and starting fresh

my only experience is the one chall is acsc

21:14

we can do this

acsc has hardware rev?

it had a couple i think...?

21:15

i solved the most basic one

21:15

rev on sd card

21:15

icc has hardware portion if im not mistaken (edited)

ic

Piers

used /ctf solve

✅ Challenge solved.

nice

took way too long

23:06

i really need to sleep

gn

Any pwns are left?

23:06

I'm on my way back to home

no more at the moment

23:07

how was your exam

Ahaaa okkk

Zafirr

how was your exam

Yea i did well

what was the subject

Analog and digital electronics

oh thats fun