> For the complete documentation index, see [llms.txt](https://ctf-achievement.gitbook.io/pwnable/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ctf-achievement.gitbook.io/pwnable/pwn.md).

# PWN

- [Pwnable.tw](https://ctf-achievement.gitbook.io/pwnable/pwn/pwnable.tw.md)
- [passwordmanager - KMACTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/passwordmanager-kmactf-2023.md)
- [Baby Calc - WannaGame2022](https://ctf-achievement.gitbook.io/pwnable/pwn/baby-calc-wannagame2022.md)
- [Ubuntu rar - FUSec 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/ubuntu-rar-fusec-2023.md)
- [File Reader - LIT CTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/file-reader-lit-ctf-2023.md)
- [Ret2Lose - ImaginaryCTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/ret2lose-imaginaryctf-2023.md): ret2dlresolve
- [Other](https://ctf-achievement.gitbook.io/pwnable/pwn/other.md)
- [KCSC Training HEAP](https://ctf-achievement.gitbook.io/pwnable/pwn/kcsc-training-heap.md)
- [Bomb removal](https://ctf-achievement.gitbook.io/pwnable/pwn/kcsc-training-heap/bomb-removal.md)
- [Heap 2](https://ctf-achievement.gitbook.io/pwnable/pwn/kcsc-training-heap/heap-2.md): Double Free
- [Heap 1](https://ctf-achievement.gitbook.io/pwnable/pwn/kcsc-training-heap/heap-1.md): Use after free
- [Heap 4 (On-going)](https://ctf-achievement.gitbook.io/pwnable/pwn/kcsc-training-heap/heap-4-on-going.md)
- [KCSC CTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/kcsc-ctf-2023.md)
- [Racecar](https://ctf-achievement.gitbook.io/pwnable/pwn/kcsc-ctf-2023/racecar.md): Race condition
- [ret2libc](https://ctf-achievement.gitbook.io/pwnable/pwn/kcsc-ctf-2023/ret2libc.md)
- [PicoCTF](https://ctf-achievement.gitbook.io/pwnable/pwn/picoctf.md)
- [ROP Emporium - Full](https://ctf-achievement.gitbook.io/pwnable/pwn/rop-emporium-full.md)
- [Srand() - Rand() (badseed)](https://ctf-achievement.gitbook.io/pwnable/pwn/srand-rand-badseed.md)
- [Random - TFCCTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/srand-rand-badseed/random-tfcctf-2023.md)
- [Unlucky - TAMU CTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/srand-rand-badseed/unlucky-tamu-ctf-2023.md)
- [Heap(UAF) - Unsubscriptions Are Free - picoCTF2021](https://ctf-achievement.gitbook.io/pwnable/pwn/heap-uaf-unsubscriptions-are-free-picoctf2021.md)
- [Heap OverFlow](https://ctf-achievement.gitbook.io/pwnable/pwn/heap-overflow.md)
- [Leek - AmstromCTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/heap-overflow/leek-amstromctf-2023.md)
- [Notes - TFCCTF2023](https://ctf-achievement.gitbook.io/pwnable/pwn/heap-overflow/notes-tfcctf2023.md)
- [FUSec - Brainf\*\*\*](https://ctf-achievement.gitbook.io/pwnable/pwn/heap-overflow/fusec-brainf.md)
- [RET to PLT (leak function - ASLR)](https://ctf-achievement.gitbook.io/pwnable/pwn/ret-to-plt-leak-function-aslr.md)
- [Gaga - AngstromCTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/ret-to-plt-leak-function-aslr/gaga-angstromctf-2023.md): ROP gadget, GOT & PLT, Buffer Overflow
- [Vip\_at\_libc (Pwnme 2023)](https://ctf-achievement.gitbook.io/pwnable/pwn/ret-to-plt-leak-function-aslr/vip_at_libc-pwnme-2023.md): Integer Overflow + Ret2PLT
- [Libc - ROPgadget](https://ctf-achievement.gitbook.io/pwnable/pwn/libc-ropgadget.md)
- [Groppling hook - TJCTF2023](https://ctf-achievement.gitbook.io/pwnable/pwn/libc-ropgadget/groppling-hook-tjctf2023.md)
- [One-Punch - DeadSecCTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/libc-ropgadget/one-punch-deadsecctf-2023.md)
- [Widget - Angstrom2023](https://ctf-achievement.gitbook.io/pwnable/pwn/libc-ropgadget/widget-angstrom2023.md): Bài này tuy có hàm win nhưng tôi sẽ làm nó theo hướng RCE(remote code execution)
- [Babypwn - MidnightFlag2023](https://ctf-achievement.gitbook.io/pwnable/pwn/libc-ropgadget/babypwn-midnightflag2023.md)
- [frorg - BYUCTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/libc-ropgadget/frorg-byuctf-2023.md)
- [Ret2Shellcode](https://ctf-achievement.gitbook.io/pwnable/pwn/ret2shellcode.md)
- [Easy Peasy - Deconstruct.F 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/ret2shellcode/easy-peasy-deconstruct.f-2023.md)
- [Shellcode as a Service - SeeTF2023](https://ctf-achievement.gitbook.io/pwnable/pwn/ret2shellcode/shellcode-as-a-service-seetf2023.md): Bài này hard quá nên mình đã đọc lại wu và viết lại bài này
- [Shelly TJCTF2023](https://ctf-achievement.gitbook.io/pwnable/pwn/ret2shellcode/shelly-tjctf2023.md)
- [shellcode BYUCTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/ret2shellcode/shellcode-byuctf-2023.md)
- [Format Strings](https://ctf-achievement.gitbook.io/pwnable/pwn/format-strings.md)
- [Nháp](https://ctf-achievement.gitbook.io/pwnable/pwn/format-strings/nhap.md)
- [Form - ImaginaryCTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/format-strings/form-imaginaryctf-2023.md)
- [Pwn06 - Ez\_Fmt\_str](https://ctf-achievement.gitbook.io/pwnable/pwn/format-strings/pwn06-ez_fmt_str.md)
- [Format String (Arbitrary Write)](https://ctf-achievement.gitbook.io/pwnable/pwn/format-strings/format-string-arbitrary-write.md)
- [showmewhatyougot - ImaginaryCTF 2022](https://ctf-achievement.gitbook.io/pwnable/pwn/format-strings/format-string-arbitrary-write/showmewhatyougot-imaginaryctf-2022.md): (Chall này mình lấy lại của 1 anh trên youtube để viết)
- [formatter - TJCTF2023](https://ctf-achievement.gitbook.io/pwnable/pwn/format-strings/format-string-arbitrary-write/formatter-tjctf2023.md)
- [Ret2Win](https://ctf-achievement.gitbook.io/pwnable/pwn/ret2win.md)
- [Teenage game - TJCTF202](https://ctf-achievement.gitbook.io/pwnable/pwn/ret2win/teenage-game-tjctf202.md)
- [Cosmicray - Sekai CTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/ret2win/cosmicray-sekai-ctf-2023.md)
- [Ret2Win - ImaginaryCTF 2023](https://ctf-achievement.gitbook.io/pwnable/pwn/ret2win/ret2win-imaginaryctf-2023.md)