https://d3bo.eu/en/tags/bof/Recent content in BoF on d3boHugo -- gohugo.ioenCopyright (c) 2025 HyasMon, 18 Mar 2024 00:00:00 +0000https://d3bo.eu/en/ctf/pico/bufferoverflow-1/Sat, 10 Feb 2024 12:16:22 +0100https://d3bo.eu/en/ctf/pico/bufferoverflow-1/Material / Information Domain: saturn.picoctf.net Port: 63667 (may vary) Binary (vuln) C source of the binary (vuln.c) #include <stdio.h> #include <stdlib.https://d3bo.eu/en/writeups/hackthebox/buff/Mon, 18 Mar 2024 00:00:00 +0000https://d3bo.eu/en/writeups/hackthebox/buff/It is a very simple machine, but we are going to analyze in depth a Buffer Overflow in CloudMe 1.11.2 and an ‘Unauthenticated Remote Code Execution’ in ‘Gym Management System 1.0’https://d3bo.eu/en/writeups/vulnhub/brainpan-1/Fri, 09 Feb 2024 00:00:00 +0000https://d3bo.eu/en/writeups/vulnhub/brainpan-1/In this machine we practice the most typical BoF (buffer overflow), the kind that usually shows up in certifications like the eCPPT or the old OSCPhttps://d3bo.eu/en/writeups/hackthebox/enterprise/Sat, 11 Nov 2023 00:00:00 +0000https://d3bo.eu/en/writeups/hackthebox/enterprise/In this writeup we solve the Enterprise machine from HackTheBox. It is a very interesting medium machine: we cover WordPress and Joomla web enumeration and SQL injections, escape from a Docker container and finally exploit a very interesting buffer overflow with the ret2libc technique