/images/avatar.png

THM pwn101 challenge write up

TRYHACKME Pwn101 The Tryhackme room Pwn101. Modify variable’s value Discovery(The Tryhackme room) β”Œβ”€β”€(rootπŸ’€KALI2021)-[/mnt/work/tryhackme/pwn101/101] └─# ./pwn101.pwn101 β”Œβ”¬β”β”¬β”€β”β”¬ ┬┬ β”¬β”Œβ”€β”β”Œβ”€β”β”¬β”Œβ”€β”Œβ”¬β”β”Œβ”€β” β”‚ β”œβ”¬β”˜β””β”¬β”˜β”œβ”€β”€β”œβ”€β”€β”‚ β”œβ”΄β”β”‚β”‚β”‚β”œβ”€ β”΄ ┴└─ β”΄ β”΄ β”΄β”΄ β”΄β””β”€β”˜β”΄ β”΄β”΄ β”΄β””β”€β”˜ pwn 101 Hello!, I am going to shopping. My mom told me to buy some ingredients. Ummm.. But I have low memory capacity, So I forgot most of them. Anyway, she is preparing Briyani for lunch, Can you help me to buy those items :D Type the required ingredients to make briyani: ZZZZZ Nah bruh, you lied me :( She did Tomato rice instead of briyani :/ Analysis β”Œ int main (int argc, char **argv, char **envp); β”‚ ; var uint32_t var_4h @ rbp-0x4 β”‚ ; var char *str @ rbp-0x40 β”‚ 0x0000088e push rbp β”‚ 0x0000088f mov rbp, rsp β”‚ 0x00000892 sub rsp, 0x40 β”‚ 0x00000896 mov dword [var_4h], 0x539 β”‚ 0x0000089d mov eax, 0 β”‚ 0x000008a2 call sym.