[Pwnable] randerer

We keep a secret

• format_list_bulleted Dreamhack
• · 2024. 11. 6.

[Pwnable] dowell

We keep a secret

• format_list_bulleted Dreamhack
• · 2024. 11. 6.

[Pwnable] horcruxes

포너블 바이너리 공짜 다운로드 ->scp -P 2222 horcruxes@pwnable.kr:/home/horcruxes/horcruxes ./Analysisflag 획득 방법 : ropme() 함수에서 입력하는 숫자와 sum 변수의 값이 일치하면 flag가 출력됨. main()각종 보호기법 추가 및 세팅 더보기int __cdecl main(int argc, const char **argv, const char **envp){ int v4; // [esp+Ch] [ebp-Ch] setvbuf(stdout, 0, 2, 0); setvbuf(stdin, 0, 2, 0); alarm(0x3Cu); hint(); init_ABCDEFG(); v4 = seccomp_init(0); seccomp_r..

• format_list_bulleted pwnable.kr
• · 2024. 8. 11.
• textsms

[Pwnable] unlink 시각화하면서 천천히 풀기

pwnkr에서는 gdb-peda 사용을 생활화$ gdb -q unlink(gdb) source /usr/share/peda/peda.py > ssh unlink@pwnable.kr -p2222 (pw: guest)Analysis코드 전체보기더보기#include #include #include typedef struct tagOBJ{ struct tagOBJ* fd; struct tagOBJ* bk; char buf[8];}OBJ;void shell(){ system("/bin/sh");}void unlink(OBJ* P){ OBJ* BK; OBJ* FD; BK=P->bk; FD=P->fd; F..

• format_list_bulleted pwnable.kr
• · 2024. 8. 9.
• textsms

[Pwnable] rop

We keep a secret

• format_list_bulleted Dreamhack
• · 2024. 7. 10.

[Pwnable] rot-253

We keep a secret

• format_list_bulleted Dreamhack
• · 2024. 7. 7.