CakeCTF 2023

pwn

Challenge NameKeywordsSummary
bofwwbof, cppBuffer overflow into arbitrary address write via std::string operator=
Memorial Cabbageinsecure libc functionmkdtemp return value lives in the stack instead of heap which allow us to overwrite it