Type your comment> @ghostride said:
Have you gotten any further @tare05 ?
I’m stuck at the same place. I have bruteforced the canary and have leaked some info that makes me able to calculate the base address of the application. But since I only have a few bytes to play with, I don’t have space for the rop chains I want.
If anyone have some nudges that doesn’t spoil the whole solution, feel free to send me a PM.
if you want a nudge hit me a PM or mattermost NSFocus