| 일 | 월 | 화 | 수 | 목 | 금 | 토 |
|---|---|---|---|---|---|---|
| 1 | 2 | 3 | 4 | 5 | 6 | 7 |
| 8 | 9 | 10 | 11 | 12 | 13 | 14 |
| 15 | 16 | 17 | 18 | 19 | 20 | 21 |
| 22 | 23 | 24 | 25 | 26 | 27 | 28 |
- writeup
- reversing
- Exploit
- hacking
- asis ctf finals
- typhoonpwn2025
- deayzl
- xion
- pwnable
- javascript engine exploit
- CTF
- Vulnerability
- std::variant
- System Hacking
- Wargame
- asis ctf
- ptr-yudai
- f is for flag
- ELF
- V8
- infobahn
- quickjs
- javascript engine
- hitcon
- pwn
- ctf player
- seccon ctf
- gdb
- Analysis
- lee seunghyun
- Today
- Total
목록Exploit (3)
deayzl's blog
[ASIS CTF Finals 2025/PWN/V8] Singleton (feat. TyphoonPWN 2025)
This challenge is one of pwn challenges from ASIS CTF Finals 2025 and I don't know why but it is the least solved one in pwn.This one is interesting because it is related to real world vulnerability that leads to rce reported by xion, Seunghyun Lee (@0x10n) but it is only that it's just modified and the root cause is changed a bit.So i put some effort to solve it and here's how i could solve it...
[Infobahn CTF 2025/PWN/V8] The Butterfly effect
this is v8 exploit challenge from Infobahn CTF 2025.here are given files.Dockerfile: ASCII textPATCH.diff: unified diff output text, 1st line "diff --git a/src/builtins/builtins-array.cc b/src/builtins/builtins-array.cc", 2nd line "index 22707f30836..5ff4d7bd270 100644", 3rd line "--- a/src/builtins/builtins-array.cc", ASCII textREVISION: ASCII textargs.gn: A..
[ASIS CTF 2025 Quals/PWN/QuickJS] RandomJS
I had only few hours to solve this and I could almost completed my exploit about 99% 1 min before ctf ends but lacked details to make it work on remote so i couldn't solve it.When I realized the problem of my exploit, I really cried hell :( 0001-Add-randompick-feat.patch:From 7fc990dae3fdac27cbff14912341116a7de5f894 Mon Sep 17 00:00:00 2001From: Pwn3r Date: Wed, 3 Sep 2025 18:21:32Subject: [PAT..