[Computerlab]

https://app.hackthebox.com/challenges/forks-and-knives
This being a PWN Challenge

Welcome to the Forks & Knives restaurant! My name is Forky and I will be your handler tonight Can I have your name please? => ComputerLab +--------------------+ | 1) Reserve a table | | 2) Place an order  | | 3) Exit            | +--------------------+ +- Manager interface (in development) -+ | 4) Login as manager                  | | 5) View reservations                | | 6) Clear reservations                | +--------------------------------------+ =>

the first 3 actions can be done by the user  the next 3 are alloted for the manager. 
An escalation is required to get into the under development Manager Interface

[Bulldog7060]

There is a buffer overflow with the name input. If a 16 character string is input the bit used for the manager interface gets set to 0 instead of its default 1.

[peRd1]

There is a buffer overflow with the name input. If a 16 character string is input the bit used for the manager interface gets set to 0 instead of its default 1.

Yup, that's right. That's how you get to manager interface.

And probably the path is reserve tables, leak canary, then place an order and buffer overflow to get shell - probably https://www.ctfrecipes.com/pwn/stack-exp...ck/ret2plt

[test888]

Can anyone provide a writeup for this challenge?

[trevor69000]

There is a buffer overflow with the name input. If a 16 character string is input the bit used for the manager interface gets set to 0 instead of its default 1.

Yup, that's right. That's how you get to manager interface.

And probably the path is reserve tables, leak canary, then place an order and buffer overflow to get shell - probably https://www.ctfrecipes.com/pwn/stack-exp...ck/ret2plt

Check your dm sir

[Computerlab]

hey @trevor69000  plz post it publically . It could be of more help

[trevor69000]

hey @trevor69000  plz post it publically . It could be of more help

i am so sorry guys for the misunderstanding, i wrote check dm for hints/help

[jokedr77]

I deeply appreciate your time and effort.

[x1rx]

anyone got any hints ?

[JoshPorter888]

Stuck on this challenge, anyone got any hints