Amelie Lacroix

분류 전체보기 검색 결과

해당 글 152건

[ASIS CTF] FCascasde ( write-up )

ASIS CTF FCascasde ( write - up )ContentLog Error ( arbitrary address off by one )_IO_buf_base Exploit Analysisvoid __fastcall __noreturn interaction(void *buf) { while ( 1 ) { write(1, "> ", 2uLL); read(0, buf, 0x128uLL); if ( strncmp(buf, "11010110", 8uLL) || chk ) { if ( !strncmp(buf, "10110101", 8uLL) ) ccloud(); } else { chk = 1; leak(buf); } } }아래와 같이 몇가지 기능을 하는 프로그램이다.11010110을 입력하면 leak(..

System Hacking ( pwnable )/CTF Write-up 2019. 12. 3. 21:38

[ASIS CTF] TinyPwn ( write-up )

ASIS CTF TinyPwn ( write - up )ContentAsm reversingexecveat Analysis# Start .text:00000000004000B0 xor rax, rax .text:00000000004000B3 xor rbx, rbx .text:00000000004000B6 xor rcx, rcx .text:00000000004000B9 xor rdx, rdx .text:00000000004000BC xor rdi, rdi .text:00000000004000BF xor rsi, rsi .text:00000000004000C2 xor r8, r8 .text:00000000004000C5 xor r9, r9 .text:00000000004000C8 xor r10, r10 .t..

System Hacking ( pwnable )/CTF Write-up 2019. 12. 3. 12:58

[ASIS CTF] cat ( write-up )

ASIS CTF cat ( write - up )ContentUsing After FreeGOT overwrite Analysis__int64 __fastcall main(__int64 a1, char **a2, char **a3) { signed int true; // [rsp+8h] [rbp-28h] char buf; // [rsp+10h] [rbp-20h] unsigned __int64 canary; // [rsp+28h] [rbp-8h] ​ canary = __readfsqword(0x28u); setup(); print_banner(); true = 1; while ( true ) { menu(); printf("which command?\n> "); read(0, &buf, 4uLL); swi..

System Hacking ( pwnable )/CTF Write-up 2019. 12. 3. 09:36

[HackTheBox] Dream Diary : Chapter 1 ( write-up )

HackTheBox Dream Diary : Chapter 1 Summarypoison NULL byteUnsafe Unlink Analysisvoid __fastcall __noreturn main(__int64 a1, char **a2, char **a3) { int select; // eax __int64 buf; // [rsp+0h] [rbp-10h] unsigned __int64 canary; // [rsp+8h] [rbp-8h] ​ canary = __readfsqword(0x28u); buf = 0LL; setvbuf(stdout, 0LL, 2, 0LL); setvbuf(stdin, 0LL, 2, 0LL); setvbuf(stderr, 0LL, 2, 0LL); while ( 1 ) { whi..

System Hacking ( pwnable )/ETC 2019. 11. 20. 16:00

[Rctf] babyheap ( write-up )

Rctf babyheap ( write-up )Analysissetup()unsigned __int64 setup() { unsigned __int16 buf; // [rsp+2h] [rbp-1Eh] int fd; // [rsp+4h] [rbp-1Ch] void *addr; // [rsp+8h] [rbp-18h] void *check; // [rsp+10h] [rbp-10h] unsigned __int64 canary; // [rsp+18h] [rbp-8h] ​ canary = __readfsqword(0x28u); num_of_chunk = 0; setvbuf(stdin, 0LL, 2, 0LL); setvbuf(stdout, 0LL, 2, 0LL); setvbuf(stderr, 0LL, 2, 0LL);..

System Hacking ( pwnable )/CTF Write-up 2019. 11. 4. 12:26