DAEDALUS

Brief

House of Husk is a secondhand marketplace for abandoned parts.

The shop allows users to register seller profile, then add their listings to sell. After posting, customers can preview each listing's product card with its order id.

Exploit the heap with the printf vulnerability, but not a normal format string vulnerability. Capture the DAEDALUS{...} flag under /flag.

Hints

Open them one at a time
Hint 1

A deleted card is removed from the client, but somehow remains in the program memory.

Hint 2

A blank description makes a small card; longer descriptions make larger cards.

Hint 3

We cannot exploit printf like a normal format string vulnerability since there's no direct param control for the call. But House of Husk can.

Files

  • dist/husk sign in to download
  • dist/libc.so.6 sign in to download
  • dist/ld-linux-x86-64.so.2 sign in to download
  • dist/README.txt sign in to download

Details

Released
2026-11-13
References
4xura.com
Writeups
None yet
Author
axura
Tags
heaplargebinglibcprintf

Inspired by Axura's House of Husk writeup and his demonstration PoCs.