[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12},"actionData","errors","root",{"_440":441,"_442":443},"routes/_root/_root",{"_436":-7,"_437":438,"_87":-7,"_439":-7},"routes/_root.tags.$tagCanonical+/_root",{"_109":110,"_17":111,"_112":41,"_113":114},"routes/_root.tags.$tagCanonical+/challenges.$challengeCanonical+/_root",{"_13":14,"_15":16,"_17":18},"challenge",{"_22":23,"_24":25,"_26":27,"_28":29,"_30":31,"_32":33,"_34":35,"_36":37,"_38":39,"_40":41,"_42":-7,"_43":44,"_45":-7,"_46":-7,"_47":41,"_48":49,"_50":51,"_52":41,"_53":-7,"_54":41,"_55":-7,"_56":-7,"_57":58,"_59":-7,"_60":-7,"_61":-7,"_62":63,"_64":41,"_65":63,"_66":63,"_67":-7,"_68":69,"_70":71,"_72":73,"_74":75},"availablePages",[19,20,21],"canonicalUrl","https://alpacahack.com/tags/win-function/challenges/basic-buffer-overflow","Description","Solves","Writeups","name","Basic Buffer Overflow","canonicalName","basic-buffer-overflow","solves",206,"flagFormat","Alpaca{...}","categories",[106],"attachments",[101],"remote",{"_98":99,"_100":63},"description","call `win()` under PIE and get a shell! \n🦙 < flag is at `/flag.txt`.\n\n

Beginner Hint

\n\n- It is recommended to solve last month's [simpleoverwrite](/daily/challenges/simpleoverwrite) first.\n\n

\n","descriptionJa","PIE 有効下で `win()` を呼び出してシェルを取ろう! \n🦙 < フラグは `/flag.txt` にあるパカ\n\n

初心者向けヒント

\n\n- 先月の [simpleoverwrite](/daily/challenges/simpleoverwrite) を先に解くことを推奨します。\n\n

\n","descriptionRequiresSignIn",false,"changeLog","authors",[94],"solvedAt","solvedAtInContext","likedByViewer","ctfChallenges",[],"tags",[89,90],"submitAsCtfChallenge","ctfCanonical","ctfEnded","point","solvesCtfChallenge","classification","medium","isMirror","ctfParticipants","ctfMode","isDailyChallenge",true,"canCheckFlagWithoutSubmission","canCreateInstance","canLike","dailyProgramCanonicalForAction","previewProgramCanonicalForAction","daily-alpacahack","dailyChallengeSlot",{"_76":77,"_57":58,"_78":79,"_80":81,"_82":83,"_84":85},"nextDailyCanonical","i-wanna-be-the-admin","httpsProxyHostname","basic-buffer-overflow.chal.alp4ca.com","program",{"_24":69,"_22":86,"_87":88},"scheduledDate",["D",1768143600000],"releaseAt",["D",1768143600000],"status","PUBLISHED","plannedTopic","Buffer Overflow","Daily AlpacaHack","timeZone","Asia/Tokyo",{"_22":85,"_24":93},{"_22":91,"_24":92},"Win Function","win-function","buffer-overflow",{"_22":95,"_96":97},"hiikunz","gravatarHash","8c0f0a659c491490d814a033d4b13ee8a8af53e5a50f36aff3f5c7f404a4c1f8","instances",[],"canSpawn",{"_102":103,"_104":105},"fileName","basic-buffer-overflow.tar.gz","url","https://alpacahack-prod.s3.ap-northeast-1.amazonaws.com/bd554048-9a40-429e-9cae-4439bf380f68/basic-buffer-overflow.tar.gz",{"_22":107,"_24":108},"Pwn","pwn","title","Tag: Win Function","https://alpacahack.com/tags/win-function","isLoggedIn","tag",{"_22":91,"_24":92,"_36":115,"_38":116,"_43":117,"_118":119,"_120":121,"_122":123},"This tag is used for challenges that contain a `win` function.\n_(automatically translated from Japanese)_\n","`win` 関数がある問題につけられるタグです。\n",[433],"updatedAt",["D",1781729124292],"challenges",[149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169],"relatedTags",[124,125,126,127,128,129,130,131,132],{"_22":85,"_24":93},{"_22":147,"_24":148},{"_22":145,"_24":146},{"_22":143,"_24":144},{"_22":141,"_24":142},{"_22":139,"_24":140},{"_22":137,"_24":138},{"_22":135,"_24":136},{"_22":133,"_24":134},"Stack Canary","stack-canary","Stack Buffer Overflow","stack-buffer-overflow","Out-Of-Bounds Read","out-of-bounds-read","Function Pointer","function-pointer","Return Address Overwrite","return-address-overwrite","C++","cpp","Out-Of-Bounds Write","out-of-bounds-write","GOT Overwrite","got-overwrite",{"_22":421,"_24":421,"_26":422,"_50":423,"_43":424,"_30":425,"_45":-7},{"_22":411,"_24":412,"_26":413,"_50":414,"_43":415,"_30":416,"_45":-7},{"_22":401,"_24":401,"_26":402,"_50":403,"_43":404,"_30":405,"_45":-7},{"_22":23,"_24":25,"_26":27,"_50":394,"_43":395,"_30":396,"_45":-7},{"_22":386,"_24":386,"_26":377,"_50":387,"_43":388,"_30":389,"_45":-7},{"_22":376,"_24":376,"_26":377,"_50":378,"_43":379,"_30":380,"_45":-7},{"_22":367,"_24":367,"_26":368,"_50":369,"_43":370,"_30":371,"_45":-7},{"_22":357,"_24":358,"_26":359,"_50":360,"_43":361,"_30":362,"_45":-7},{"_22":346,"_24":347,"_26":348,"_50":349,"_43":350,"_30":351,"_45":-7},{"_22":336,"_24":337,"_26":338,"_50":339,"_43":340,"_30":341,"_45":-7},{"_22":324,"_24":325,"_26":326,"_50":327,"_43":328,"_30":329,"_45":-7},{"_22":310,"_24":310,"_26":311,"_50":312,"_43":313,"_30":314,"_45":-7},{"_22":294,"_24":295,"_26":296,"_50":297,"_43":298,"_30":299,"_45":-7},{"_22":282,"_24":282,"_26":283,"_50":284,"_43":285,"_30":286,"_45":-7},{"_22":268,"_24":268,"_26":269,"_50":270,"_43":271,"_30":272,"_45":-7},{"_22":253,"_24":254,"_26":255,"_50":256,"_43":257,"_30":258,"_45":-7},{"_22":236,"_24":236,"_26":237,"_50":238,"_43":239,"_30":240,"_45":-7},{"_22":220,"_24":220,"_26":221,"_50":222,"_43":223,"_30":224,"_45":-7},{"_22":205,"_24":205,"_26":206,"_50":207,"_43":208,"_30":209,"_45":-7},{"_22":187,"_24":188,"_26":189,"_50":190,"_43":191,"_30":192,"_45":-7},{"_22":170,"_24":171,"_26":172,"_50":173,"_43":174,"_30":175,"_45":-7},"Takahashi","takahashi",29,[180,181,182,183,184],[177],[176],{"_22":107,"_24":108},{"_22":178,"_96":179},"ptr-yudai","329c13332736e97decec505f5918236c2c8d476d724076661539bbf1cae11db9",{"_22":143,"_24":144},{"_22":185,"_24":186},{"_22":145,"_24":146},{"_22":147,"_24":148},{"_22":91,"_24":92},"std::priority_queue","std-priority-queue","cache crasher","cache-crasher",33,[197,198,199,200],[194],[193],{"_22":107,"_24":108},{"_22":195,"_96":196},"keymoon","b7a9c60d9c74c589ae9575bdbbf63893e4082a2711ff0a85a3bcab9e9b1fc5a2",{"_22":203,"_24":204},{"_22":201,"_24":202},{"_22":139,"_24":140},{"_22":91,"_24":92},"Arbitrary Address Write","arbitrary-address-write","Double Free","double-free","bofww",38,[212,213,214,215,216,217],[211],[210],{"_22":107,"_24":108},{"_22":178,"_96":179},{"_22":143,"_24":144},{"_22":218,"_24":219},{"_22":133,"_24":134},{"_22":85,"_24":93},{"_22":91,"_24":92},{"_22":147,"_24":148},"std::string","std-string","read-write",41,[227,228,229,230,231],[226],[225],{"_22":107,"_24":108},{"_22":178,"_96":179},{"_22":137,"_24":138},{"_22":145,"_24":146},{"_22":234,"_24":235},{"_22":232,"_24":233},{"_22":91,"_24":92},"Stack Leak","stack-leak","Libc Leak","libc-leak","deck",43,[243,244,245,246,247],[242],[241],{"_22":107,"_24":108},{"_22":178,"_96":179},{"_22":252,"_24":252},{"_22":250,"_24":251},{"_22":248,"_24":249},{"_22":139,"_24":140},{"_22":91,"_24":92},"Fake Chunk","fake-chunk","Heap Buffer Overflow","heap-buffer-overflow","off-by-one","memset note","memset-note",46,[263,264,265],[260],[259],{"_22":107,"_24":108},{"_22":261,"_96":262},"mora","1cc3e9c7667e707ae28a5a980868f56f9a7b17760442842e302c162c51ce7f36",{"_22":135,"_24":136},{"_22":266,"_24":267},{"_22":91,"_24":92},"Canary Leak","canary-leak","vtable4b",63,[275,276,277,278],[274],[273],{"_22":107,"_24":108},{"_22":178,"_96":179},{"_22":143,"_24":144},{"_22":281,"_24":281},{"_22":91,"_24":92},{"_22":279,"_24":280},"Fake Vtable","fake-vtable","vtable","write",88,[289,290,291,292,293],[288],[287],{"_22":107,"_24":108},{"_22":178,"_96":179},{"_22":85,"_24":93},{"_22":133,"_24":134},{"_22":145,"_24":146},{"_22":147,"_24":148},{"_22":91,"_24":92},"Erased Secret","erased-secret",89,[305,306,307],[303],[300],{"_22":301,"_24":302},"Misc","misc",{"_22":304,"_96":-5},"rsk0315",{"_22":91,"_24":92},{"_22":137,"_24":138},{"_22":308,"_24":309},"Optimization","optimization","vuln4vuln",104,[319,320,321],[316],[315],{"_22":107,"_24":108},{"_22":317,"_96":318},"k0080","073ca3a9075d030a249a78c3513648c685e27af124ba6a1c9fdf1a6ead8fc39f",{"_22":85,"_24":93},{"_22":322,"_24":323},{"_22":91,"_24":92},"Global Buffer Overflow","global-buffer-overflow","Noob programmer","noob-programmer",112,[332,333],[331],[330],{"_22":107,"_24":108},{"_22":317,"_96":318},{"_22":334,"_24":335},{"_22":91,"_24":92},"Uninitialized Value","uninitialized-value","Disappeared","disappeared",127,[344,345],[343],[342],{"_22":107,"_24":108},{"_22":317,"_96":318},{"_22":141,"_24":142},{"_22":91,"_24":92},"kappa overflow","kappa-overflow",133,[355,356],[353],[352],{"_22":107,"_24":108},{"_22":354,"_96":-5},"colza",{"_22":135,"_24":136},{"_22":91,"_24":92},"Short Writer","short-writer",136,[365,366],[364],[363],{"_22":107,"_24":108},{"_22":317,"_96":318},{"_22":141,"_24":142},{"_22":91,"_24":92},"catcpy",150,[374,375],[373],[372],{"_22":107,"_24":108},{"_22":178,"_96":179},{"_22":85,"_24":93},{"_22":91,"_24":92},"func-array",165,[385],[382],[381],{"_22":107,"_24":108},{"_22":383,"_96":384},"trimscash","d1d3c28a8c6839cae17d58470a56ce8b870dc099d160bb415967335fdd6e98b1",{"_22":91,"_24":92},"before-write",[392,393],[391],[390],{"_22":107,"_24":108},{"_22":178,"_96":179},{"_22":85,"_24":93},{"_22":91,"_24":92},[399,400],[398],[397],{"_22":107,"_24":108},{"_22":95,"_96":97},{"_22":85,"_24":93},{"_22":91,"_24":92},"inbound",213,[408,409,410],[407],[406],{"_22":107,"_24":108},{"_22":178,"_96":179},{"_22":145,"_24":146},{"_22":147,"_24":148},{"_22":91,"_24":92},"Integer Writer","integer-writer",359,[419,420],[418],[417],{"_22":107,"_24":108},{"_22":261,"_96":262},{"_22":141,"_24":142},{"_22":91,"_24":92},"echo",368,[428,429,430],[427],[426],{"_22":107,"_24":108},{"_22":178,"_96":179},{"_22":85,"_24":93},{"_22":431,"_24":432},{"_22":91,"_24":92},"Integer Overflow","integer-overflow",{"_22":434,"_96":435},"minaminao","8923101afaa06c6be81216763685dbd0cac8ff24fbd6646250f67608d4924b02","user","language","en","timeZoneAbbr","clientConfig",{"_444":445,"_446":63,"_447":448,"_449":448,"_450":451,"_452":453,"_454":41,"_455":443},"cspNonce","","firebaseOptions",{"_456":457,"_458":459,"_460":461,"_462":463,"_464":465,"_466":451},"isVercel","env","production","envName","gaTrackingId","G-FJX5L5Y9FE","turnstileSiteKey","0x4AAAAAAAfYTP7SUci3nVKW","isSpawnerUnderMaintenance","spawnerMaintenanceNotice","apiKey","AIzaSyDGInmUCFubPOqJWQCw3LBB-XZGj9LX4l4","appId","1:691353492123:web:4ae258ec8c620e63f0443e","projectId","alpacahack","authDomain","alpacahack.firebaseapp.com","messagingSenderId","691353492123","measurementId"]