Skip to content

Latest commit

 

History

History

can-you-gets-me

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 

can-you-gets-me

Points: 650

Category

Binary Exploitation

Question

Can you exploit the following program to get a flag? You may need to think return-oriented if you want to program your way to the flag. You can find the program in /problems/can-you-gets-me_1_e66172cf5b6d25fffee62caf02c24c3d on the shell server. Source.

Hint

This is a classic gets ROP

Solution

First, find out the padding required for the buffer overflow. Then, use a rop chain to get the flag.

ROP chain generated by ROPgadget.

Working solution solve.py.

Flag

picoCTF{rOp_yOuR_wAY_tO_AnTHinG_700e9c8e}