
[pwnable.xyz] Dirty Turtle
Wargame/pwnable.xyz
''.join([i for i in 'Dirty Turtle Off-RoadS' if i.isupper()]) Mitigation Analysis win() int win() { return system("cat flag"); } win()이 실행되도록 하면 플래그를 획득할 수 있다. main() int __cdecl main(int argc, const char **argv, const char **envp) { char *addr; // [rsp+0h] [rbp-10h] unsigned __int64 val; // [rsp+8h] [rbp-8h] setup(argc, argv, envp); puts("Dirty Turtle Off-RoadS"); printf("Addr: "); addr = (char..