>/Ctf_tasks/sign_me_up $

Estimated reading time: 32 seconds


Category: Pwn

Difficulty: Easy

Can you trick the program into leaking a hidden flag stored just outside the allowed bounds?

In Sign Me Up, a signed-to-unsigned integer conversion flaw allows access to data[11], even though the program claims to only allow indexes from 0 to 10. Your task is to find a way to access the 11th index and get the flag.


Requirements:
- Understanding of signed/unsigned integer casting
- No reverse engineering needed
- Goal: read the flag via logic flaw

Download attachments: