Skip to content
0xburger
MY 13:57
TICKET03/ 06

PWN // SERVICE

Stack the Patty

Overflow a sixteen-byte prep slot by exactly one useful byte.

OPENservice

THE TICKET

Brief

A WebAssembly prep routine copies an arbitrary byte sequence into a sixteen-byte ticket buffer. The byte immediately after it controls the manager latch.

Objective

Set the latch to hexadecimal 42 and recover the practice flag.

Buffer
16 bytes @ 0x100
Latch
1 byte @ 0x110
Target
0x42

LOCAL RUNNER

Workbench

NO NETWORK
0x10016-byte ticket bufferlatch 0x000x110
Download module122 bytes // exports memory, plate, reset

Manager latch reads 0x00.

TEAR-OFF CLUES

Hints

No hints opened. This is not scored.

    FINAL CHECK

    SHA-256 / LOCAL

    Stamp the flag.

    The answer pass is waiting.

    Validation happens entirely on this device. No answer or activity is transmitted.