Passionate about low-level security: kernels, browsers, binary exploitation. Writeups and notes.https://retr0.fyi/https://retr0.fyi/pwn/hackfest24-quals-pwnables/https://retr0.fyi/pwn/hackfest24-quals-pwnables/Writeups for the pwnables I authored for Hackfest 2k24 quals.Sun, 24 Mar 2024 00:00:00 GMTpwnbuffer-overflowheapuafprintfhouse-of-husklibc-2.36https://retr0.fyi/pwn/rootme-safe-linking-bypass/https://retr0.fyi/pwn/rootme-safe-linking-bypass/UAF on glibc 2.32: leaking the heap to defeat safe-linking.Sun, 15 Oct 2023 00:00:00 GMTpwnsafe-linkingheap-exploitationtcachehttps://retr0.fyi/pwn/rootme-10kctf-number-conversion/https://retr0.fyi/pwn/rootme-10kctf-number-conversion/Stack buffer overflow into ret2libc on libc 2.31.Wed, 26 Oct 2022 00:00:00 GMTpwnbuffer-overflowlibc-2.31ret2libchttps://retr0.fyi/pwn/babyheap-backdoorctf2021/https://retr0.fyi/pwn/babyheap-backdoorctf2021/A classic heap exploitation challenge with a plot twist (pwn, 500).Sat, 01 Jan 2022 00:00:00 GMTpwnheapglibc