RatCTF
🐀 0 pts earned

Lane: Ret2Win

Premium Machine (Locked)

🧩 MemoryLane

🖧 AD Network — MemoryLane

Lane: Ret2Win 🔒 Lane: Shellcode 🔒 Lane: ROP Chain 🔒 Lane: Format Str 🔒 Lane: Heap

32-bit SUID binary with no protections (no canary, no NX, no PIE). A gets() call overflows the stack. win() at a fixed address gives a root shell when the return address is overwritten.

🩸 First user blood: 00x003 🩸 First root blood: 00x003
Machine online
Target IP Premium required
User Flag Pending
Root Flag Pending

Community

Community Hints

Grade A · 1000 pts Grade B · 700 pts Grade C · 400 pts Grade D · 200 pts + 150 credits on accept

Short, stage-specific nudges — directional, spoiler-light, no exact commands.

No community hints yet — be the first to add one!

Community

Community Walkthroughs

Grade A · 2500 pts Grade B · 1750 pts Grade C · 1000 pts Grade D · 500 pts + 300 credits on accept

🔒 Walkthroughs are spoilers — capture the root flag on this machine to unlock them for free.