/tags/ret2win/Recent content in ret2win on d3boHugo -- gohugo.ioenCopyright (c) 2025 HyasSun, 12 Oct 2025 00:00:00 +0000/ctf/navaja/armeria/Sun, 12 Oct 2025 00:00:00 +0000/ctf/navaja/armeria/#!/usr/bin/env python3 from pwn import * e = ELF("./Armeria") context.binary = e # Set the target binary for pwntools context.terminal = ["kitty", "-e"] # Terminal to use for GDB debugging HOST = "challs./ctf/rop-emporium/ret2csu/Thu, 11 Sep 2025 00:00:00 +0000/ctf/rop-emporium/ret2csu/#!/usr/bin/env python3 from pwn import * e = ELF("./ret2csu_patched") context.binary = e # Set the target binary for pwntools context.terminal = ["kitty", "-e"] # Terminal to use for GDB debugging HOST = "10./ctf/rop-emporium/pivot/Wed, 10 Sep 2025 00:00:00 +0000/ctf/rop-emporium/pivot/#!/usr/bin/env python3 from pwn import * e = ELF("./pivot") libc = ELF("./libpivot.so") context.binary = e # Set the target binary for pwntools context./ctf/rop-emporium/ret2win/Tue, 19 Aug 2025 00:00:00 +0000/ctf/rop-emporium/ret2win/#!/usr/bin/env python3 from pwn import * exe = ELF("./ret2win_patched") context.binary = exe def conn(): if args.LOCAL: r = process([exe.path]) if args./ctf/why/callme/Mon, 18 Aug 2025 00:00:00 +0000/ctf/why/callme/CODE /* Old Memes Never Die * compile without protection, because protection is for Tonies! * gcc -m32 -fno-stack-protector -o old-memes old-memes./ctf/wwctf/affirmationbot/Mon, 28 Jul 2025 00:00:00 +0000/ctf/wwctf/affirmationbot/#!/usr/bin/env python3 from pwn import * exe = ELF("./affirmationbot_patched") context.binary = exe context.terminal = ["alacritty", "-e"] gdb_script = """ b main b affirm c """ def conn(): if args./ctf/fcsc/bofbof/Sun, 20 Jul 2025 00:00:00 +0000/ctf/fcsc/bofbof/Para este reto se proporciona un binario undefined8 main(void) { char local_38 [40]; long local_10; local_10 = 0x4141414141414141; printf("Comment est votre blanquette ?/ctf/caixa-bank-tech/2025/202507/Wed, 16 Jul 2025 00:00:00 +0000/ctf/caixa-bank-tech/2025/202507/Para el reto se proporciona un binario int __fastcall main(int argc, const char **argv, const char **envp) { double v3; // xmm0_8 char nptr[8]; // [rsp+0h] [rbp-70h] BYREF __int64 v6; // [rsp+8h] [rbp-68h] __int64 v7; // [rsp+10h] [rbp-60h] __int64 v8; // [rsp+18h] [rbp-58h] __int64 v9; // [rsp+20h] [rbp-50h] __int64 v10; // [rsp+28h] [rbp-48h] __int64 v11; // [rsp+30h] [rbp-40h] __int64 v12; // [rsp+38h] [rbp-38h] double v13; // [rsp+48h] [rbp-28h] unsigned int v14; // [rsp+54h] [rbp-1Ch] double v15; // [rsp+58h] [rbp-18h] double v16; // [rsp+60h] [rbp-10h] unsigned int v17; // [rsp+6Ch] [rbp-4h] *(_QWORD *)nptr = 0LL; v6 = 0LL; v7 = 0LL; v8 = 0LL; v9 = 0LL; v10 = 0LL; v11 = 0LL; v12 = 0LL; v17 = 0; v16 = 0.