Admin Service

Securinets-Quals-CTF-2023   PWN  

题目作者: 未知

一　　血: ‌‌‌‌‌admin889

一血奖励: 0金币

解　　决: 1

提　　示:

描　　述:

Notes:

• Leak everything using /proc/self/maps.
• Use updateConfig function to gain an arbitrary write. There is no upper bound check for the index.
• Write a shellcode/gadget in executeable area.
• Toggle the execution of the "backupCall" by writing "backup: 1" to the config.
• Execute backup.

附　　件: 下载

去做题