/images/avatar.png

Saif Aziz

Aspiring Vulnerability Researcher

Dragon CTF 2020 - no-eeeeeeeeeeeemoji Writeup

Writeup for a pwn challenge from Dragon CTF 2020. The challenge mmaps a 4096 bytes with RWX permissions, takes input into the allocated memory then does some operations on it. 2 bytes of our input gets executed before the program terminates.

HackTM CTF 2020 - Obey The Rules Writeup

Writeup for a pwn challenge from HackTM Quals 2019 which only takes an input of 11 bytes. Solution included fuzzing allowed syscalls to bypass seccomp rules,doing an arbitrary read to execute more shellcode and leaking the flag using a sidechannel attack.

EGCTF 2019 - SCA101 Writeup

Writeup for a misc challenge from EGCERT CTF 2019. The challenge gives a netcat server which takes input and compares it to the flag with time delay for each correct character.