>/Ctf_tasks/sign_me_up $
Estimated reading time: 32 seconds
Category: Pwn
Difficulty: Easy
Can you trick the program into leaking a hidden flag stored just outside the allowed bounds?
In Sign Me Up, a signed-to-unsigned integer conversion flaw allows access to data[11]
, even though the program claims to only allow indexes from 0 to 10. Your task is to find a way to access the 11th index and get the flag.
Requirements:
- Understanding of signed/unsigned integer casting
- No reverse engineering needed
- Goal: read the flag via logic flaw
Download attachments: