Topic: #Pwn
A collection of 7 posts about Pwn.
A pwn writeup for blooockchain, covering raw SHA-256 digests, strncat, an OOB leak, and saved RIP overwrite.
A pwn writeup for DG-Server, from HTTP parser triage to the final exploit path.
A pwn writeup for ooonvifd, focusing on the ONVIF parser bug and exploitation flow.
A pwn writeup for std-print, using the binary symbols, ROP, and flag memory leak path.
A pwn writeup for 特別的愛給特別的你, covering the QEMU/raw-disk execution model and exploit path.
A pwn writeup for 獨屬於你的魔法, using one arbitrary write and glibc internals to reach shell.