AlpacaHack Round 6 (Pwn) Writeup

CTFTime event link: https://ctftime.org/event/2501

Writeup

• Pwn
  1. inbound
  2. catcpy

Background

• Starts: 03 Nov. 2024, 03:00 UTC
• Ends: 03 Nov. 2024, 09:00 UTC

AlpacaHack is a new CTF platform for individual competitions. AlpacaHack Round 6 (Pwn) is the 6th CTF hosted by the AlpacaHack team, featuring 4 Pwn challenges. The challenges are designed with a wide range of difficulties, making them enjoyable for participants of all levels, including beginners. They are created by ptr-yudai.

Overview

• Solves: 1/4
• Score: 128
• Global Rank: 49/197
• Overall Difficulty To Me: ★★★★★★★★★☆

What I’ve learned in this CTF

• Pwn
  1. inbound - Hijack GOT via out-of-bounds write
  2. catcpy - Stack buffer overflow via strcpy and strcat