rockrid3r / CoolSols

Writeups for ctf solutions which I liked or feel need to go through

CoolSols

CTF tasks/writeups which I liked or feel important to go through

nu1l 2023

• n1sub. Kernel module & wrong kernel config
• n1proxy. rust using libc. unsafe
• n1canary. fun c++ unique-ptr exploitation
• n1array. hard

hack.lu 2023

• rustymix. rust-C type confusion

Asis 2023

• zpwn. vulnerable zsh module
• night.js. custom js interpreter(patched from Serenity OS). https://gnoudnh.github.io/posts/asis2023-writeup/

Seccon 2023

• umemo: mmap, page tables, pagefault.
• kmemo
• qmemo

Hitcon 2023

• wall-rose cross-cache by chovid https://chovid99.github.io/posts/hitcon-ctf-2023/
• wall-rose DirtyPipe: msg_msg + pipe_buffer, by author wxrdnx: https://github.com/wxrdnx/HITCON-2023-Challenges/tree/main/wall-rose
• wall-maria. Solution by nobodyisnobody https://github.com/nobodyisnobody/write-ups/tree/main/Hitcon.Quals.2023/pwn/Full.Chain.-.Wall.Maria

CoR 2023

• the-catacomb, kernel exploitation. Inspired by CVE
• smm-diary (CPU security)

Sekai 2023

• algorithm-multitool (c++ coroutine)
• coroutine from idekCTF (c++ coroutine)

Dice 2023

• Sice supervisor: race condition, heap, userland