Skip to content

Instantly share code, notes, and snippets.

@c4ebt
c4ebt / ex-helpless.py
Last active December 6, 2022 20:04
corCTF 2021 Helpless solution by c4e (author)
#!/usr/bin/python
# corCTF 2021 Helpless solution by c4e (author)
# there are many different techniques that can be used to solve Helpless because of
# the nature of the challenge (UAF, variety of sizes allowed)
# My solution uses a House of Rust smallbin variation and then finishes the exploit off
# with a standard __GI__IO_file_jumps fsop triggered with stdout.
# feel free to dm me on discord if you want to discuss the solution. c4e#1255