Tags: pwn oob 

Rating:

Out of bounds write in trustlet ‘1’, allows us to write random bytes at an address of
our choice. We can write our shellcode to an `rwx` region with this, without any bruteforce !

Original writeup (https://blog.bi0s.in/2019/07/01/Pwn/microservice/).