dmctf2020 write up for re4
神必的最短路径…
惯例的拖入IDA，发现只读入了50个字符，没法溢出（x
大概是一个类似走10 * 10迷宫的小程序？
手动抠迷宫出来（抠吐了），其中1为通路，0为墙，如下：
1 | 1000011000 |
按照这个布局，v6为y，v5为x，0123对应→←↓↑
走最短路，最终得出flag应当为：
1 | flag{2022000033002222202202} |
dmctf2020 write up for re4
http://meteorpursuer.github.io/2020/12/10/dmctf2020 write up for re4/
# Related Post
1.RWCTF2023体验赛 write up for Digging into kernel 3
2.utctf2021 write up for 2Smol
3.minilctf2020 write up for easycpp
4.moectf2020 write up for baby canary
5.moectf2020 write up for baby migration
6.GWCTF 2019 write up for xxor
7.moectf2020 write up for rop2
8.dmctf2020 write up for re1
1.RWCTF2023体验赛 write up for Digging into kernel 3
2.utctf2021 write up for 2Smol
3.minilctf2020 write up for easycpp
4.moectf2020 write up for baby canary
5.moectf2020 write up for baby migration
6.GWCTF 2019 write up for xxor
7.moectf2020 write up for rop2
8.dmctf2020 write up for re1
