CSAW CTF 2026 Quals — What Changes Between glibc Versions
Diamond Dogs, Hell’s Bells, Saint Vespers. Three challenges that leak libc through a UAF and reclaim a freed object to overwrite a function pointer.
Writeups
What/Who — Reversing VM Bytecode Sealed in a Container
Unpack a custom container format to extract VM bytecode, recover the ISA, and invert the six challenge questions.
The Cinder Engine — Reversing a Custom VM Embedded in an ARM Binary
Recover the ISA of a custom VM embedded in a stripped ARM aarch64 binary, then invert the 8-round SPN block cipher implemented inside its firmware to recover the flag.