archlinux / r3t0x@portfolio
ALL SYSTEMS NOMINAL /
← Back to archive · Pwn

Securinets Friendly CTF 2026 / Pwn WRITEUP

CyberLeek's Burner

CyberLeek's burner phone has started receiving fragments from somewhere inside Vice City. Every transmission disappears almost immediately, and the sender refuses to repeat anything.

EVENTSecurinets Friendly CTF 2026CATEGORYPwnDIFFICULTYeasyPOINTS200
pwntools

Walkthrough

Solution

The service emits eight random transmissions between BEGIN LEAK and END LEAK. Capture each line and return it unchanged at the RETURN LEAK prompt before the two-second alarm expires. Eight exact echoes unlock the flag.

Reference solver

The reference solver supplied with the writeup:

#!/usr/bin/env python3
from pwn import *

context.log_level = "error"

io = remote("127.0.0.1", 9002)

for _ in range(8):
    io.recvuntil(b"BEGIN LEAK\n")
    leak = io.recvline().strip()
    io.sendlineafter(b"RETURN LEAK: ", leak)

io.recvuntil(b"LEAK RECOVERED:\n")
print(io.recvline().decode().strip())
io.close()

Flag

Securinets{th3_burn3r_n3v3r_st0pp3d_r1ng1ng}
Published 2026-09-28 · by r3t0x← Back to archive · Pwn
0xSEARCH_INDEX

Trace a memory.

INDEX ONLINE0 addresses
↑↓ TRACEENTER OPENESC DISMISS