Hacker News new | ask | show | jobs
by moyix 378 days ago
I made a CTF challenge based on that lovely feature of select() :D You could use the out-of-bounds bitset memory corruption to flip bits in an RSA public key in a way that made it factorable, generate the corresponding private key, and use that to authenticate.

https://threadreaderapp.com/thread/1723398619313603068.html

2 comments

I love how you've made it Eva themed, my respect to you.
Oh that’s clever!