Freaks City

In binary analysis, understanding data type representations is fundamental. Here are common data type definitions: _WORD (1 word = 2 bytes = 16 bits) _DWORD (2 words = 4 bytes = 32 bits) _QWORD (4 words = 8 bytes = 64 bits) _OWORD (8 words = 16 bytes = 128 bits) Assembly directives for data definition: DB (Define Byte): Defines single-byte ...

Overview This article covers fundamental exploitation techniques in binary security, focusing on practical examples from CTF challenges. The content assumes basic familiarity with assembly and memory layout concepts. Example 1: Command Execution via Input Filtering A Python script was provided that accepts user input and executes it using os.sy ...

Dynamic Linking and GOT/PLT Mechanism Shared libraries utilize position-independent code. When a dynamic library is mapped into memory, a base address is added to the file offsets to calculate the actual runtime addresses. The relationship remains constant: runtime_address = base_address + file_offset. The Procedure Linkage Table (PLT) and Glob ...

The challenge can be downloaded from: Download Link (Password: 0000) Solution Approach ret2libc involves hijacking program control flow to execute funcsions from the standard C library (libc). Typically, this is achieved by redirecting execution to a function's PLT entry or a specific address within the GOT table. Usual, the goal is to invoke s ...

To learn IO_FILE-based heap exploitation, we must understand its underlying mechanism. This article examines several key IO functions using source code analysis and dynamic debugging. 1. fwrite Function Overview 1.1 Overall Flow The main implementation of fwrite resides in _IO_new_file_xsputn, containing four distinct phases: Check remaining s ...

Environment Configuration For optimal results in binary exploitation exercises, an Ubuntu 22.04 LTS environment is recommended due to its stability and tool support. While Kali Linux is often preferred for web security testing, Ubuntu serves as the foundation for most Pwn-related tasks. Return-to-Text (Ret2Text) This technique leverages buffer ...