SkullSecurity Blog

This is a write-up for rugdoctor, which is a JIT compiler with a 16-bit integer overflow.

This is a write-up for three “pwn” challenges - readwritecallme, readwriteme, readme.

This is a challenge I’ve been considering making forever.

This will be a write-up for the three shorter / more miscellaneous challenges I wrote: if-it-leads gitfab jengacrypt As always, you can find copies of the binaries, containers, and full solution in our GitHub repo!

In this post, I’m going to do write-ups for a few challenges that don’t really meaningfully categorize.

I wrote a wholllle pile of 101 web challenges this year, which are ultimately going to be adapted for a workshop I’m giving at NorthSec in Montreal next month.

If you read my bug-me write-up or my Linux process injection blog, you may be under the impression that I’ve been obsessed with the ability of Linux processes to write to their own memory.

Every year, I make a list of ideas and it contains the same thing: “process that debugs itself”.

Hey all!

This is a write-up for turing-complete, turing-incomplete, and turing-incomplete64 from the BSides San Francisco 2024 CTF!