GDB Stack Smash Drill
reverse · medium · +45 XP
Target
GET /api/lab/gdb-stack-101/disassemble (mock objdump of the vuln binary)
POST /api/lab/gdb-stack-101/exploit body {offset, return_addr} (simulated execution)
Goal: the buffer is 64 bytes. After 72 bytes (buffer + saved RBP) the saved RIP starts. Overwrite it with the address of the win() function = 0x4011a6. Submit offset=72, return_addr=0x4011a6 (hex string OK).
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/gdb-stack-101/
// reuse on the cli
// submit flag
// no solves yet
3 of 12 · reverse