CTF Binary Exploitation (Pwn)

Quick reference for pwn challenges. For detailed techniques, see supporting files.

Additional Resources

• format-string.md - Format string exploitation (leaks, GOT overwrite, blind pwn, filter bypass)
• advanced.md - Advanced techniques (heap, JIT, esoteric GOT, custom allocators, DNS overflow)

Source Code Red Flags

• Threading/pthread → race conditions
• usleep()/sleep() → timing windows
• Global variables in multiple threads → TOCTOU

Race Condition Exploitation