일 | 월 | 화 | 수 | 목 | 금 | 토 |
---|---|---|---|---|---|---|
1 | 2 | 3 | 4 | 5 | 6 | |
7 | 8 | 9 | 10 | 11 | 12 | 13 |
14 | 15 | 16 | 17 | 18 | 19 | 20 |
21 | 22 | 23 | 24 | 25 | 26 | 27 |
28 | 29 | 30 |
- System Hacking
- h4cking game
- webhacking
- 워게임
- ctf player
- 해킹
- TeamH4C
- Wreckctf
- reversing
- crypto
- dreamhack
- webhacking.kr
- Wargame
- hacking
- python
- hack
- CTF
- KAIST
- 2022 Fall GoN Open Qual CTF
- got overwrite
- Gon
- writeup
- hacking game
- typhooncon
- pwnable
- christmas ctf
- 웹해킹
- cryptography
- WEB
- Buffer Overflow
- Today
- Total
목록CTF writeup (14)
deayzl's blog
The binary consists of two functions; main and main[cold]. main: int __cdecl main(int argc, const char **argv, const char **envp) { __int64 v3; // rax char *v4; // rdi char *v5; // rdx char *v6; // rax __int64 v7; // rsi __int64 v8; // rcx signed __int64 v9; // rbx signed __int64 v10; // rax size_t v11; // rdx char *v12; // rsi __int64 v13; // rbx int v14; // ebp char v15; // cl int *v16; // rdi..
I did play this ctf as team 프로그램털모찌. It was about 7 am for me in korea when I solved this. I spent the night with no sleep. Then I fell asleep right after I solved this. I realized that.. guys, try to sleep at the appropriate time, or you gon miss upcoming challenges. When I opened my eyes, there was already "subformore" released long time ago :( (this is why I could only give an aaw primitive f..
box.c : // gcc box.c -o box -no-pie #include #include #include #include #include #include #include #include #define FLAG_PATH "/flag" int install_seccomp(uint8_t *filt, unsigned short len); void vuln(); void read_flag(); uint32_t target = 0xdead; int main(int argc, char **argv) { uint32_t filt_len; setvbuf(stdin, NULL, _IONBF, 0); setvbuf(stdout, NULL, _IONBF, 0); setvbuf(stderr, NULL, _IONBF, 0..
Tool: ghidra 10.2.2 with GolangAnalyzerExtension Exploit: making utf-8 shellcode (pwnable) feat. I've never written any code in go language, so all of these are from internet references and quite a lot of my predictions. So there might be something wrong with my analysis. /* WARNING: Unknown calling convention */ /* Name: main.handleConnection Start: 004cd140 End: 004cdb00 */ void main.handleCon..
files: encrypt.c, isThisFileUseful.txt, justBinaries.txt, up_down.py isThisFileUseful.txt: 1001010110001010100011001000101110011110100101001001101010000110 justBinaries.txt: 11110100000101010111111101110011111001001101000010001101101101001100101100000111111110100111000110000001100011011111111101000010001101101100010110100100101100111110000111011111111001001000101010010100100011100000010100010010..
1. crawl import requests s = requests.Session() counter = 1 while True: req = requests.Request('GET', 'http://ctf.incognito.kr:9000/ctf/mailbox') pre = s.prepare_request(req) resp = s.send(pre) csrf = resp.text[resp.text.find("{ \"X-CSRFToken\": '")+len("{ \"X-CSRFToken\": '"):] csrf = csrf[:csrf.find('\'')] req = requests.Request('POST', 'http://ctf.incognito.kr:9000/ctf/mailbox/mail_detail') p..