r00tstici / writeups Goto Github PK

Thank you for much for doing the writeup and I 100% believe that you get the correct flag afterwards.

There is just one thing that didn't sit well with me. I am trying to understand how you concluded that the time was between 9am - 11pm. It takes the train at least 6 - 7 hours just to go from MAS to that bridge/temple location. So, even if this person took the 6am train (which is the earliest train), the time would have been at least 12pm - 1pm instead, right?

Hi!

I enjoyed going through your writeups for the Redpwn CTF. I had one doubt and I would be really glad if you could explain it to me.
In the rot26 writeup, you have written

exploit += '%34607x' #print enough character to reach shell[4:]
exploit += '%7$n' #write number of character printed in first address
exploit += '%32973x' #print enough character to reach shell[0:4]
exploit += '%8$n' #write number of character printed in first address

How did you come up with the numbers 34607 and 32973 and what is is the significance of them in the exploit. I couldn't exactly understand it from the comments.

Thank you!