archivist

A minimal record archive with one too many features. Heap exploitation on modern glibc with full mitigations.

Insane Heap Seccomp FSOP

// connect

nc byteshyftstudios.com 1337click to copy

Architecture

x86_64

libc

glibc 2.41

Protections

Full RELRO / PIE / NX / Canary

Sandbox

seccomp (no execve)

Timeout

60 seconds

Flag Format

bsg{...}

// description

A minimal record store with integrity checks, tamper seals, and a state machine that should prevent all the usual heap primitives. Every mutation goes through the integrity gate, and the binary self-sandboxes with seccomp before processing any input.

The question is: did we get the state machine right?

// what you get

The challenge binary (chal)
Exact target libc.so.6 and ld-linux-x86-64.so.2
The binary has source-level obfuscation — no source code provided

// constraints

execve / execveat are blocked by seccomp
No sockets, no clone, no ptrace
You need an ORW (open-read-write) solve path
Flag is at /flag.txt

Download Challenge ~1.1 MB · tar.gz

Solve & Redeem

When you get the flag, redeem it on the main site: open the console (~ key) and type redeem bsg{...} to earn your badge and a spot on the Hall of Fame.

____ _ _____ _ __ _ | _ \ | | / ____| | / _| | | |_) |_ _ ___| |_ ___ | (___ | |__ _ _| |_| |_ | _ <| | | / __| __/ _ \ \___ \| '_ \| | | | _| __| | |_) | |_| \__ \ || __/ ____) | | | | |_| | | | |_ |____/ \__, |___/\__\___| |_____/|_| |_|\__, |_| \__| __/ | __/ | |___/ |___/