전체 글
[TrollCat CTF] Only Pwnable WriteUp
Thoughts Only using bad func, we can't attack BOF vulnerability. (Length of bad_thought is 0x20 and dest variable exists at [ebp - 0x28]) but look at this, using good_thougt, we can concatenate the two strings, good and bad thought. then 'strcpy' func in bad func copy the BIG STRING(bad + good thought) to dest variable. look at the exploit code. from pwn import * p = remote("157.230.33.195", 111..