VCS Passport 2025

CTF > Viettel Cyber Security > VCS Passport 2025

final pokemon player

Vulnerability: toc-tou race condition -> out-of-bound write; arbitrary function pointer -> stack buffer overflow using gets()

toc-tou race-condition sink-to-source return-address-overwrite return-oriented-programming stack-buffer-overflow out-of-bound
December 30, 2025 • December 20, 2025 • Medium
CTF > Viettel Cyber Security > VCS Passport 2025

pwn

Vulnerability: heap buffer overflow - improper length check in read()

heap-exploitation heap-buffer-overflow tcache-poisoning return-address-overwrite return-oriented-programming
December 22, 2025 • December 20, 2025 • Medium
CTF > Viettel Cyber Security > VCS Passport 2025

node user

Vulnerability: heap buffer overflow - improper buffer check in read()

heap-buffer-overflow
December 22, 2025 • December 20, 2025 • Easy
There are 3 pages in this directory.