> For the complete documentation index, see [llms.txt](https://arne-ctf.gitbook.io/ctf/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://arne-ctf.gitbook.io/ctf/arnes-ctf-writeups.md).

# Arne's CTF Writeups!

## Team

I usually play solo under the team **CreateRemoteThread**.

{% embed url="<https://ctftime.org/team/146417>" %}

## Pwn

<table><thead><tr><th width="649">Techniques used</th><th>Link</th></tr></thead><tbody><tr><td>Ret2dlresolve ROP, BOF, no win function</td><td><a href="/pages/GXKzpMsSMOB4PkGQ6sVR">Link</a></td></tr><tr><td>Ret2win, BOF, ROP, ROPGadget</td><td><a href="/pages/sCOJwjq0CLBK87EMWGTT">Link</a></td></tr><tr><td>Ret2system, fmtstr to leak canary, BOF to system('/bin/sh')</td><td><a href="/pages/XDfKyQq6gRuOmBcqDH9n">Link</a></td></tr><tr><td><code>strncmp</code> vuln, 1/256 null byte brute-force</td><td><a href="/pages/CaMixGbeMXy733d7Xxjj">Link</a></td></tr><tr><td>Fmtstr, <code>puts</code> GOT override with win function</td><td><a href="/pages/ycWUAiblZ1T0qRpBSngN">Link</a></td></tr><tr><td>BOF, no win function, no leaks, no gadgets, system() available</td><td><a href="/pages/iyAeKuotN8ZdsLg3Ulk7">Link</a></td></tr></tbody></table>