# Binary Exploitation

### Stonks \[20 pts] \[Not Solved]

> **Description**
>
> I decided to try something noone else has before. I made a bot to automatically trade stonks for me using AI and machine learning. I wouldn't believe you if you told me it's unsecure! [vuln.c](https://mercury.picoctf.net/static/a4ce675e8f85190152d66014c9eebd7e/vuln.c) `nc mercury.picoctf.net 59616`

**Solution**

a

**Flag:** 

### Cache Me Outside \[70 pts] \[Not Solved]

> **Description**
>
> While being super relevant with my meme references, I wrote a program to see how much you understand heap allocations. `nc mercury.picoctf.net 31153` [heapedit](https://mercury.picoctf.net/static/af9d9987f1c92fcaf931198b7d40a581/heapedit) [Makefile](https://mercury.picoctf.net/static/af9d9987f1c92fcaf931198b7d40a581/Makefile) [libc.so.6](https://mercury.picoctf.net/static/af9d9987f1c92fcaf931198b7d40a581/libc.so.6)

**Solution**

a

**Flag:** 

### Here's a LIBC \[90 pts] \[Not Solved]

> **Description**
>
> I am once again asking for you to pwn this binary [vuln](https://mercury.picoctf.net/static/e2e74335fdc2f17852825bc3fa48b00e/vuln) [libc.so.6](https://mercury.picoctf.net/static/e2e74335fdc2f17852825bc3fa48b00e/libc.so.6) [Makefile](https://mercury.picoctf.net/static/e2e74335fdc2f17852825bc3fa48b00e/Makefile) `nc mercury.picoctf.net 1774`

**Solution**

a

**Flag:** 

### Unsubscriptions Are Free \[100 pts] \[Not Solved]

> **Description**
>
> Check out my new video-game and spaghetti-eating streaming channel on Twixer! [program](https://mercury.picoctf.net/static/a2942823c97135cf6c05b15455de13a8/vuln) and get a flag. [source](https://mercury.picoctf.net/static/a2942823c97135cf6c05b15455de13a8/vuln.c) `nc mercury.picoctf.net 50361`

**Solution**

a

**Flag:** 

### filtered-shellcode \[160 pts] \[Not Solved]

> **Description**
>
> A program that just runs the code you give it? That seems kinda boring... [fun](https://mercury.picoctf.net/static/9d302535b2bb43210f8deafa96379975/fun) `nc mercury.picoctf.net 26072`

**Solution**

a

**Flag:** 

### Kit Engine \[200 pts] \[Not Solved]

> **Description**
>
> Start your engines!! [d8](https://mercury.picoctf.net/static/57bf78fb7f9fd6e29e72762cc8460f70/d8) [source.tar.gz](https://mercury.picoctf.net/static/57bf78fb7f9fd6e29e72762cc8460f70/source.tar.gz) [server.py](https://mercury.picoctf.net/static/57bf78fb7f9fd6e29e72762cc8460f70/server.py) Connect at mercury.picoctf.net 17805

**Solution**

a

**Flag:** 

### Stonk Market \[250 pts] \[Not Solved]

> **Description**
>
> I've learned my lesson, no more reading my API key into memory. Now there's no useful information you can leak! [vuln](https://mercury.picoctf.net/static/15eef4fbcac64b26bdb02056913b0e1b/vuln) [vuln.c](https://mercury.picoctf.net/static/15eef4fbcac64b26bdb02056913b0e1b/vuln.c) [Makefile](https://mercury.picoctf.net/static/15eef4fbcac64b26bdb02056913b0e1b/Makefile) `nc mercury.picoctf.net 25462`

**Solution**

a

**Flag:** 

### Download Horsepower \[350 pts] \[Not Solved]

> **Description**
>
> Gotta go fast [d8](https://mercury.picoctf.net/static/b365c6469c900642330879230c102f95/d8) [source.tar.gz](https://mercury.picoctf.net/static/b365c6469c900642330879230c102f95/source.tar.gz) [server.py](https://mercury.picoctf.net/static/b365c6469c900642330879230c102f95/server.py) Connect at mercury.picoctf.net 32364

**Solution**

a

**Flag:** 

### The Office \[400 pts] \[Not Solved]

> **Description**
>
> I'm tired of having to secure my data on the heap, so I decided to implement my own version of malloc with canaries. It's 10x more secure and only 100x slower! [the\_office](https://mercury.picoctf.net/static/d7d69b6dc8245d8ad10507bb32a02bae/the_office) `nc mercury.picoctf.net 45725`

**Solution**

a

**Flag:** 

### Turboflan \[450 pts] \[Not Solved]

> **Description**
>
> A Radiant Gourmet Flan told our young Turboflan hero to stop rushing and slow down. Has he listened? [d8](https://mercury.picoctf.net/static/c9a369ea0416f9510f5b5a4b8427f2b7/d8) [source.tar.gz](https://mercury.picoctf.net/static/c9a369ea0416f9510f5b5a4b8427f2b7/source.tar.gz) [server.py](https://mercury.picoctf.net/static/c9a369ea0416f9510f5b5a4b8427f2b7/server.py) Connect at mercury.picoctf.net 23694

**Solution**

a

**Flag:** 

### Bizz Fuzz \[500 pts] \[Not Solved]

> **Description**
>
> FizzBuzz was too easy, so I made something a little bit harder... There's a buffer overflow in this problem, good luck finding it! [vuln](https://mercury.picoctf.net/static/1f811fa887dc53d4b38756e11a54b8d0/vuln) `nc mercury.picoctf.net 22210`

**Solution**

a

**Flag:**