You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: guides/fallctf-2023/pwn.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -33,7 +33,7 @@ Calling `square` will store three things on the stack:
33
33
- The result variable
34
34
35
35
36
-
36
+
37
37
38
38
39
39
@@ -53,7 +53,7 @@ int main(){
53
53
54
54
`gets` has a massive security flaw, **it does not restrict the number of bytes read.**`gets` doesn't return until you send a terminating character (e.g. newline), thus it'll read over any predefined buffer that you make. Consider the structure of the stack:
55
55
56
-
56
+
57
57
58
58
If we read more than 8 bytes (characters), what would happen to `result`? What about the saved base or return pointers?
Copy file name to clipboardExpand all lines: guides/fallctf-2023/web.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,7 +19,7 @@ When you click on a link within your browser, your computer makes a request to a
19
19
20
20
When content is sent between your computer and the server, it includes additional metadata called "Headers". Some of this data remains in your browser, either as **cookies** or **local storage** (technically more kinds).
21
21
22
-
22
+
23
23
24
24
- Cookies are saved per website, and are sent in each request. They can be changed by Javascript or a request header.
25
25
- Local Storage is saved per website, but are not sent in each request. They can be changed by Javascript in your browser.
@@ -30,13 +30,13 @@ Developer tools is how you view additional website about an information. For our
30
30
31
31
To open devtools, hit `Ctrl + Shift + C` (windows) or `Command + Shift + C` (mac). Alternatively, right click and hit inspect.
Chrome Devtools is a suite of software developer information for web development. During challenges, you will be able to poke around different tabs. Here are some helpful tabs to lookout for:
36
36
37
37
* Console (you can run your own javascript in this tab)
38
38
39
-
39
+
40
40
41
41
Pro Tip: You can use breakpoints within the console by clicking next to the line number. This can allow you to stop at certain lines before the run and check variables
42
42
@@ -46,30 +46,30 @@ The network tab shows all information transmitted to/from your computer to the s
46
46
47
47
48
48
49
-
49
+
50
50
51
51
* Sources
52
52
53
53
The sources tab shows a listing of all files on the server that were requested.
54
54
55
-
55
+
56
56
57
57
* Application
58
58
59
59
The application tab shows the saved cookies, local storage, and other information stored in your browser.
Copy file name to clipboardExpand all lines: guides/fallctf-2024/pwn.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -33,7 +33,7 @@ Calling `square` will store three things on the stack:
33
33
- The result variable
34
34
35
35
36
-
36
+
37
37
38
38
39
39
@@ -53,7 +53,7 @@ int main(){
53
53
54
54
`gets` has a massive security flaw, **it does not restrict the number of bytes read.**`gets` doesn't return until you send a terminating character (e.g. newline), thus it'll read over any predefined buffer that you make. Consider the structure of the stack:
55
55
56
-
56
+
57
57
58
58
If we read more than 8 bytes (characters), what would happen to `result`? What about the saved base or return pointers?
Copy file name to clipboardExpand all lines: guides/fallctf-2024/web.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,7 +19,7 @@ When you click on a link within your browser, your computer makes a request to a
19
19
20
20
When content is sent between your computer and the server, it includes additional metadata called "Headers". Some of this data remains in your browser, either as **cookies** or **local storage** (technically more kinds).
21
21
22
-
22
+
23
23
24
24
- Cookies are saved per website, and are sent in each request. They can be changed by Javascript or a request header.
25
25
- Local Storage is saved per website, but are not sent in each request. They can be changed by Javascript in your browser.
@@ -30,13 +30,13 @@ Developer tools is how you view additional website about an information. For our
30
30
31
31
To open devtools, hit `Ctrl + Shift + C` (windows) or `Command + Shift + C` (mac). Alternatively, right click and hit inspect.
Chrome Devtools is a suite of software developer information for web development. During challenges, you will be able to poke around different tabs. Here are some helpful tabs to lookout for:
36
36
37
37
* Console (you can run your own javascript in this tab)
38
38
39
-
39
+
40
40
41
41
Pro Tip: You can use breakpoints within the console by clicking next to the line number. This can allow you to stop at certain lines before the run and check variables
42
42
@@ -46,30 +46,30 @@ The network tab shows all information transmitted to/from your computer to the s
46
46
47
47
48
48
49
-
49
+
50
50
51
51
* Sources
52
52
53
53
The sources tab shows a listing of all files on the server that were requested.
54
54
55
-
55
+
56
56
57
57
* Application
58
58
59
59
The application tab shows the saved cookies, local storage, and other information stored in your browser.
0 commit comments