Tags: risc-v hardware pwn
Rating: 5.0
TL;DR DMA status isn't cleared on reset, unbounded write at address 0 upon reset -> load shellcode & win
[Read the full writeup](https://ethanwu.dev/blog/2020/07/16/chujowy-ctf-ford-cpu/)
I don't remember
