PWN :: Minimelfistic

The Elves finally understood what went wrong with all their plans. They were too fancy and obvious! But, this one is different.. It's a security system, but the alarm rings whenever Santa's house is vulnerable to an attack. Will you manage to deactivate it? p.s. Sound on!

Solution

• Basic buffer overflow. NX and ASLR enabled, so leverage ROP to get code exec. Limited in gadgets available, so use a tactic known as ret2csu to leak the address of write.

Full write-up coming soon.