/..

#CONTENT

#TOP

build.sh
50 bytes2025-01-21 06:27
Dockerfile
405 bytes2025-01-21 06:27
dump.bpf
321 bytes2025-01-21 06:27
exp.asm
2 KiB2025-01-21 06:27
flag
25 bytes2025-01-21 06:27
launcher
14 KiB2025-01-21 06:27
Makefile
101 bytes2025-01-21 06:27
patch
732 KiB2025-01-21 06:27
patch.py
525 bytes2025-01-21 06:27
README.mdx
494 bytes2025-01-21 06:27
rules.txt
3 KiB2025-01-21 06:27
server.py
4 KiB2025-01-21 06:27
solve.py
469 bytes2025-01-21 06:27
test
14 KiB2025-01-21 06:27
test.c
101 bytes2025-01-21 06:27

#nothing is true

Seccomp rules that only allows close, munmap, brk, exit, exit_group, mmap, and open in 64 bit mode. There is an alternate set of rules for 32 bit mode, which allows exit, read, write, brk, mmap, munmap, and exit_group. Solution involves opening the flag in 64 bit mode, then switching to 32 bit to write the flag to stdout. The binary also checks for syscall and int 0x80 instructions, but this can be easily bypassed with self modifying code.