https://blog.pepsipu.com Go from one byte out-of-bounds write to a complete ROP chain without IO access and no brute force under extremely restrictive seccomp, without *ever* knowing ASLR base. Wed, 02 Feb 2022 00:00:00 +0000 https://blog.pepsipu.com/posts/nightmare https://blog.pepsipu.com/posts/nightmare A list of problems for Cyber Skyline to resolve. Sat, 09 Oct 2021 00:00:00 +0000 https://blog.pepsipu.com/posts/a-serious-critique-of-ncl https://blog.pepsipu.com/posts/a-serious-critique-of-ncl Writeup to uiuctf's mujs challenge, a javascript pwn challenge were you must pwn the MuJS javascript engine to achieve arbitrary read, write, and code execution. Sat, 18 Jul 2020 00:00:00 +0000 https://blog.pepsipu.com/posts/mujs-uiuctf https://blog.pepsipu.com/posts/mujs-uiuctf Writeup to redpwnctf's Albatross challenge, where you'd need to take advantage of a python 'eval' without using ASCII characters, strings, and no python builtin functions. Thu, 25 Jun 2020 00:00:00 +0000 https://blog.pepsipu.com/posts/albatross-redpwnctf https://blog.pepsipu.com/posts/albatross-redpwnctf Implementing a circular double linked list kernel memory allocator for my latest operating system, dbOS. Sat, 13 Jun 2020 00:00:00 +0000 https://blog.pepsipu.com/posts/pmm-for-oses https://blog.pepsipu.com/posts/pmm-for-oses A blog by pepsipu to talk about computer science and IT security. Sun, 03 May 2020 00:00:00 +0000 https://blog.pepsipu.com/posts/the-pepsi-place https://blog.pepsipu.com/posts/the-pepsi-place