dctf - Cache (pwn)
Heap, UAF, Double Freezh3ro ctf - more-printf (pwn)
write-what-where; fsbictf - A little birdie once told me... (pwn)
brute force canary; fork()dctf - Formats Last theorem (pwn)
Full RELRO FSB, malloc/free_hook
Newer