Taz
⌘Ctrl K

Taz —

ships web apps to real usersand writes exploitation challengesfor CTF players.

scroll
« The path is long,but the bugs are shorter. »

Latest Au Revoir The Stack · 4 min

Journal

Format Strings

  • Full Clip format string · %n write · self-referential stack pointer
    author Securinets Friendly CTF 2026
  • Radio Los Santos format string · stack information leak
    author Securinets Friendly CTF 2026
  • Radio Vice City format string · positional specifiers · stack information leak
    author Securinets Friendly CTF 2026
  • Rocketman format string · %n write · multi-stage write
    author Securinets Friendly CTF 2026
  • Rootstar Games format string · %n write · authentication bypass
    author Securinets Friendly CTF 2026
  • Same Same But Different! format string · %n write · authentication bypass
    author Securinets Friendly CTF 2026
  • Short Fuse format string · GOT overwrite · %hn write · PLT/GOT pivot
    author Securinets Friendly CTF 2026
  • print(xxx); format string · libc leak · canary bypass · GOT overwrite · one_gadget
    author Pioneers25 CTF

The Stack

  • Au Revoir stack overflow · ROP · ret2win · TCP half-close
    author Securinets Friendly CTF 2026
  • Wrong Turn stack overflow · ret2shellcode · executable stack
    author Securinets Friendly CTF 2026
  • ARMBLUSBLUS stack overflow · ret2win · ROP · aarch64
    author Pioneers25 CTF
  • Fill me stack overflow · ret2win
    author Pioneers25 CTF

Shellcode

  • The Safehouse format string · arbitrary write · ret2shellcode
    author Securinets Friendly CTF 2026
  • Who likes assembly anw ? stack overflow · ROP · shellcode · seccomp · /proc/self/maps scan
    author Pioneers25 CTF

Signals & Syscalls

  • Speed Dial raw syscall
    author Securinets Friendly CTF 2026
  • Wrong Number raw syscall · execveat
    author Securinets Friendly CTF 2026
  • 5959595959 stack overflow · SROP · stack pivot · sigreturn
    author Pioneers25 CTF

The Heap

  • Hope Exploitation use-after-free · tcache poisoning · safe-linking bypass · heap pointer leak
    author Pioneers25 CTF

Bit Flips

  • Flip Flip Flip arbitrary bit flip · loop counter corruption · function pointer overwrite
    author Pioneers25 CTF
Esc

    ↓ results · Enter open · Esc close

    Keys

    jk
    Next and previous row
    ↓↑
    The same, once a row has focus
    Enter
    Open the row
    1234
    Home, Projects, Journal, About
    /
    Search
    CtrlK
    Search, from anywhere (⌘ K on a Mac)
    ?
    This list
    Esc
    Close a layer
    gg
    Back to the top