Скачать или смотреть Farewell [0xff: One Last Address]

The HTB Content team made me a goodbye CTF consisting of four challenges. In this video, I'll solve Farewell, a format string pwn challenge from w3th4nds.

w3th4nds YouTube:    / @w3th4nds  
Peda: https://github.com/longld/peda
uv CheatSheet: https://0xdf.gitlab.io/cheatsheets/uv

☕ Buy Me A Coffee: https://www.buymeacoffee.com/0xdf

[00:00] Introduction
[00:35] Challenge introduction
[02:26] Ghidra RE
[03:55] Format string vulnerability
[05:00] Editing out sleeps
[07:48] Format string debug
[11:06] Referencing by offset
[12:07] Writing data overview
[12:46] Starting Python exploit script
[15:00] Dealing with null bytes
[19:30] Moving address to the end
[21:00] Writing data POC
[21:50] Getting correct value
[23:18] Exploiting remotely
[24:45] Pwntools payload generation
[26:55] Conclusion

#ctf #pwn #ghidra #reverse-engineering