Sitemap
iCTF 2008
- iCTF 2008 writeups
- Development Server : Format string basique
- Bomb Server : Reverse et patching d'ELF
- Crackme 1 - rce 100 : Crackme Windows
- Crackme 2 - rce 200 : Crackme Android
Nuit du Hack Public Wargame 2011
- Nuit du Hack Public Wargame 2011 writeups
- Crackme 1 - Safecrypt : Crackme Windows
- Crackme 4 - Reverseme1 : Crackme Windows
iCTF 2011
- iCTF 2011 writeups
- Challenge 33 - Forensics 100 : File carving de base
- Challenge 17 - ASM 133786 : Un ASM personnalisé
- Challenge 31 - Reverse 150
- Challenge 25 - Reverse 150 : Patch d'exécutable basique
- Challenge 32 - Reverse 250
- Challenge 30 - Reverse 500
- Challenge 29 - Reverse 800 : Crackme Windows
- Convicts service : Restricted bash
- Msgdispatcher service : Python local module import
- Mailgateway service : Heap overflow, function pointer overwrite
- Smsgateway service : Heap overflow, 4-bytes write anywhere
PlaidCTF 2012
- PlaidCTF 2012 writeups
- Bunyan - pwn 200 : Stack overflow exécutable Go
- Secure FS - pwn 600 : C++ virtual table corruption
Defcon 20 Quals
- Defcon 20 Qualifiers writeups
- pwn 100 : Stack overflow
CSAW 2012 Quals
- CSAW 2012 Qualification Round writeups
- Exploitation 300 : Stack overflow exploité dans le BSS
- Exploitation 400 : Stack overflow exploité sur la pile
- Exploitation 500 : Stack overflow exploité par return into libc
Codegate YUT 2013 Preliminary
- Codegate YUT 2013 Preliminary writeups
- Vulnerable 100 : Stack overflow exploité sur la pile
- Vulnerable 200 : Stack overflow exploité dans le BSS
- Vulnerable 400 : int overflow, uninitialized function pointer
iCTF 2012
- iCTF 2012 writeups
- Nuclearboom service : Format string et stack overflow basiques
- Pewpew service : Stack overflow + off-by-one
PlaidCTF 2013
- PlaidCTF 2013 writeups
- Ropasaurusrex - pwn 200 : ROP basique sur un stack overflow
- Pork - pwn 250 : stack overflow + ROP
- Servr - pwn 400 : x64 kernel SLUB overflow
BKP CTF 2013
Defcon 21 Quals
- Defcon 21 Qualifiers writeups
- Annyong - pwn 4 : x64 remote stack overflow
Hack.lu 2013
- Hack.lu 2013 writeups
- ELF - RE 400 : Crackme Linux feat. ptrace, PLT and GOT
CSAW 2013 Finals
iCTF 2013
- iCTF 2013 writeups
- Poipoi service : Stack overflow
BKP CTF 2014
- Boston Key Party CTF 2014 writeups
- Risc_emu - pwn 100 : Function pointer overwrite
- Zen garden - pwn 300 : Heap corruption
Plaid CTF 2015
- Plaid CTF 2015 writeups
- PlaidDB - pwn 550 : NUL off-by-one in the heap
BKP CTF 2016
- Boston Key Party CTF 2016 writeups
- qwn2own - generic browser exploits : Vector corruption for browser exploitation
glibc
- glibc research
- From Heap to RIP : From glibc heap control to generic code execution
Linux kernel
- Linux kernel research
- The curious case of CVE-2020-14381 : kernel use-after-free exploitation and patching in the various distributions