# Exploiting a custom tetris game in CSAW Quals 2020

DevFeed: [Exploiting a custom tetris game in CSAW Quals 2020](<https://devfeed.tech/articles/exploiting-a-custom-tetris-game-in-csaw-quals-2020-39679.md>)

Original publisher: [Read original article](<https://mahaloz.re/2020/09/13/csaw-quals-2020-blox.html>)

Published: 2020-09-13T00:00:00Z

Content type: tutorial

Language: en

Sources: [mahaloz.re](<https://devfeed.tech/sources/mahaloz-re.md>)

Topics: [Code](<https://devfeed.tech/topics/code.md>), [arcade](<https://devfeed.tech/topics/arcade.md>), [Ghidra](<https://devfeed.tech/topics/ghidra.md>), [Reconnaissance](<https://devfeed.tech/topics/recon.md>), [Script](<https://devfeed.tech/topics/script.md>)

Tags: [ctf](<https://devfeed.tech/tags/ctf.md>), [game](<https://devfeed.tech/tags/game.md>), [ghidra](<https://devfeed.tech/tags/ghidra.md>), [pwn](<https://devfeed.tech/tags/pwn.md>), [reversing](<https://devfeed.tech/tags/reversing.md>), [solve](<https://devfeed.tech/tags/solve.md>), [writeup](<https://devfeed.tech/tags/writeup.md>)

## AI overview

This writeup explains how a custom Tetris game in CSAW Quals 2020 was analyzed and exploited. The challenge involved discovering cheat-piece placements, obtaining the binary, reverse-engineering its checks, and using an out-of-bounds write to obtain a partial write primitive and ultimately the flag.

## Source excerpt

Pwning a custom Tetris game through an out-of-bounds write to memory through block manipulation and changes to the `.text` segment.