# pwn

Published articles for pwn.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Exploiting a custom tetris game in CSAW Quals 2020

DevFeed: [Exploiting a custom tetris game in CSAW Quals 2020](<https://devfeed.tech/articles/exploiting-a-custom-tetris-game-in-csaw-quals-2020-39679.md>)

Original publisher: [Read original article](<https://mahaloz.re/2020/09/13/csaw-quals-2020-blox.html>)

Published: 2020-09-13T00:00:00Z

Content type: tutorial

Language: en

Sources: [mahaloz.re](<https://devfeed.tech/sources/mahaloz-re.md>)

Topics: [Code](<https://devfeed.tech/topics/code.md>), [arcade](<https://devfeed.tech/topics/arcade.md>), [Ghidra](<https://devfeed.tech/topics/ghidra.md>), [Reconnaissance](<https://devfeed.tech/topics/recon.md>), [Script](<https://devfeed.tech/topics/script.md>)

Tags: [ctf](<https://devfeed.tech/tags/ctf.md>), [game](<https://devfeed.tech/tags/game.md>), [ghidra](<https://devfeed.tech/tags/ghidra.md>), [pwn](<https://devfeed.tech/tags/pwn.md>), [reversing](<https://devfeed.tech/tags/reversing.md>), [solve](<https://devfeed.tech/tags/solve.md>), [writeup](<https://devfeed.tech/tags/writeup.md>)

### AI overview

This writeup explains how a custom Tetris game in CSAW Quals 2020 was analyzed and exploited. The challenge involved discovering cheat-piece placements, obtaining the binary, reverse-engineering its checks, and using an out-of-bounds write to obtain a partial write primitive and ultimately the flag.

### Source excerpt

Pwning a custom Tetris game through an out-of-bounds write to memory through block manipulation and changes to the `.text` segment.