Recent posts

Phoenix - Format Three

This level has the same issue as the previous one so we will solve the 32bit version. The goal of this level is to wr...

4 minute read

Phoenix - Format Two

The goal of this level is to use the format string vulnerability to write to a memory address **changeme**...

2 minute read

Phoenix - Format One

This level is the same as the last one except that we need set **changeme** to a specific value **0x45764f6c** instea...

less than 1 minute read

Phoenix - Format Zero

To learn about format string vulnerability see the references at the end. This code uses **sprintf** function to writ...

2 minute read

Phoenix - Stack Six

This level exploits the 1‑byte buffer overflow, to learn more about it read the references at the end. This code read...

5 minute read

Phoenix - Stack Five

Here we don't have any function to jump to but we have a buffer large enough to fit a shellcode. The idea is to put o...

2 minute read

Phoenix - Stack Four

The goal of this level is to overwrite the return address of **start_level** function to return to **complete_level**...

1 minute read

Phoenix - Stack Three

The goal of this challenge if to overwrite the value of **fp** which is a function pointer to point to **complete_le...

1 minute read