Leet Test [easy]: HackTheBox Pwn Challenge (format string write exploit with pwntools)

Video walkthrough for retired HackTheBox (HTB) Pwn (binary exploitation) challenge "Leet Test" [easy]: "Are you 1337 enough?" - Hope you enjoy 🙂

Sign up for HackTheBox: https://hacktheboxltd.sjv.io/xk75Yk

↢Social Media↣
Twitter: https://twitter.com/_CryptoCat
GitHub: https://github.com/Crypto-Cat
HackTheBox: https://app.hackthebox.eu/profile/11897
LinkedIn: https://www.linkedin.com/in/cryptocat
Reddit: https://www.reddit.com/user/_CryptoCat23
YouTube: https://www.youtube.com/CryptoCat23
Twitch: https://www.twitch.tv/cryptocat23

↢HackTheBox↣
https://app.hackthebox.eu/challenges/173

↢Resources↣
https://github.com/Gallopsled/pwntools-tutorial
https://guyinatuxedo.github.io/
https://wapiflapi.github.io/2019/10/10/efficiency-reverse-engineering-with-ghidra.html
https://www.tutorialspoint.com/format-specifiers-in-c
https://medium.com/swlh/binary-exploitation-format-string-vulnerabilities-70edd501c5be
https://nickcano.com/pwnables-fsb/
https://www.nullhardware.com/reference/hacking-101/picoctf-2018-binary-exploits/echooo/
https://github.com/VulnHub/ctf-writeups/blob/master/2016/angstrom-ctf/format-1.md
https://cotonne.github.io/binary/2020/07/14/format-string.html
https://bitvijays.github.io/LFC-BinaryExploitation.html#format-string-vulnerability
https://www.youtube.com/watch?v=0WvrSfcdq1I
https://www.youtube.com/watch?v=df5P5DiBLng

↢Chapters↣
Start - 0:00
Basic file checks - 0:25
Analyse with Ghidra - 2:57
Format string vulnerability explained - 10:34
Fuzzing format string specifiers - 17:22
Writing to memory using printf - 28:04
Check out PwnTools FmtStr (auto) - 31:25
Calculate random value offset from leaked stack value - 37:46
Perform the writes with FmtStr - 48:55
Build payload manually in PwnTools - 55:42
Test exploit remotely - 58:46

Видео Leet Test [easy]: HackTheBox Pwn Challenge (format string write exploit with pwntools) канала CryptoCat