<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>ASLR bypass on d3bo</title><link>https://d3bo.eu/en/tags/aslr-bypass/</link><description>Recent content in ASLR bypass on d3bo</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>Copyright (c) 2025 Hyas</copyright><lastBuildDate>Wed, 27 Mar 2024 00:00:00 +0000</lastBuildDate><atom:link href="https://d3bo.eu/en/tags/aslr-bypass/index.xml" rel="self" type="application/rss+xml"/><item><title>October</title><link>https://d3bo.eu/en/writeups/hackthebox/october/</link><pubDate>Wed, 27 Mar 2024 00:00:00 +0000</pubDate><guid>https://d3bo.eu/en/writeups/hackthebox/october/</guid><description>In this machine we exploit OctoberCMS with default credentials and a file upload that bypasses an extension check. For privilege escalation we perform a buffer overflow with a technique called ret2libc, with ASLR (Address Space Layout Randomization) enabled</description></item></channel></rss>