View Code? Open in Web Editor
NEW
This project forked from yuawn/my-ctf-design
My CTF designs.
Dockerfile 5.31%
Makefile 1.92%
C 52.00%
Python 38.54%
Shell 2.23%
my_ctf_design's Introduction
alphanumeric shellcoding.
- PIE on, and full relro.
- Use input end without NULL byte weakness in printf to leak
PIE base, stack address, and libc.
- Use vulnerability to do stack overflow.
- It could only overflow to return address for one gadget, you can use magic gadget in libc or do
stack migration for ret2libc.
- Advanced format string attack.
- All protection are enabled.
fmt buf is at global.- Because of full
relro, you can't do gothijacking.
- First time
fmt Leak stack address and libc base.
- Second time
fmt to forge last two byte of rbp.
- Overwrite return address of
_IO_vfprintf_internal with one gadget.
_dl_make_stack_executable.- Socket shellcodeing.
- Reverse shell.
- Double free
- fastbin attack
- gothijacking
add_name overflow overwrite top chunk size.- House of force to overwrite data pointer.
- Leak libc and overwrite
__malloc_hook.
- Leave messege trigger shell.
- realloc() trick.
- fastbin attack increase size.
- heap overflow.
- sysmalloc trick.
- unsorted bin attack to data pointer.
- forge top chunk pointer.
- __malloc_hook -> one.
my_ctf_design's People
Contributors
Watchers
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent