Detailed Guide to Getting Started with Windows ETW
Detailed Guide to Getting Started with Windows ETW
Disclaimer: The following content is based on information from the internet and some of my own notes, aimed at a more comprehensive study and recording of ETW-related knowledge.
Environment
Operating System: Windows 10 21H1
Introduction to ETW
History
ETW (Event Tracing for Windows) was first introduced in Windows 2000, after which the operating system core and services began using ETW to log events. After Windows Vista, ETW introduced a uni ...
Understanding Yara, Sigma, and Snort Rules in Cybersecurity
Understanding Yara, Sigma, and Snort Rules in Cybersecurity
In the field of cybersecurity, Yara , Sigma , and Snort are essential tools used for creating and implementing rules to detect and respond to security threats. Each tool serves a unique purpose and has its own strengths and weaknesses. This article provides an overview of these tools, including a practical examples of Yara rules and detailed installation and usage instructions for the Windows enviroment.
Overview
Tool
Primary U ...
OSINT Exercise 001 walkthrough
OSINT Exercise 001 walkthrough
I came to know about this interesting website because of an introduction by Ball45.
Challenge INFO
https://gralhix.com/list-of-osint-exercises/osint-exercise-001/
My Solution
Kiffa is located in Mauritania, and its location can be roughly pinpointed using Google Maps:
The map shows that it is not too far from the equator, so it should follow the general pattern of the sun rising in the east and setting in the west:
Using the pattern of the sun's rise and set a ...
basic mod 1
basic mod 1
https://play.picoctf.org/practice/challenge/253
The file ./message.txt contains a series of numbers. By taking each number mod 37 and then mapping them according to the rules ( 0-25 is the alphabet (uppercase), 26-35 are the decimal digits, and 36 is an underscore. ) mentioned in the question, you can obtain the flag.
exploit
123456789101112131415161718192021import stringmes = ""with open("./message.txt") as fp: mes = fp.read().strip()print(mes)mes_arr = mes.sp ...
Portfolio
作品集
研究所時期
主題
連結網址
說明
程式安全 Computer Security 2023 FALL hw0
連結網址
CTF 、學習筆記
程式安全 Computer Security 2023 FALL tool
連結網址
CTF 、學習筆記
Randomized Algorithms
連結網址
學習筆記
大學時期
主題
連結網址
說明
pwnable tw writeup ( start )
連結網址
CTF PWN
Travel Vision 大數據視覺化
連結網址
國立中正大學資訊管理學系畢業專題
The Detection of Fake News
連結網址
國立中正大學資料探勘期末報告
Artificial Neural Network
連結網址
國立中正大學 AI 助教 slide
SHELL CTF 2022 writeup
連結網址
CTF writeup
Google CTF 2021
連結網址
CTF
2019 Trendmicro CTF Wildcard 400
連結網址
CTF 威脅分析 ...
About_Sharkkcode
關於我
常用 Nickname : Sharkkcode 、 sharkkcode 、 Shark|||
熱衷於程式設計、資訊安全、人工智慧以及教育。
我的基本資訊
資訊
連結或內容
Gmail
fuhanpan.zzz@gmail.com
Instagram
_river________
BLOG 文章整理、作品整理、導覽
連結
Github 個人頁面
連結
我的資安經歷
第八屆臺灣好厲駭
第七屆臺灣好厲駭
第六屆臺灣好厲駭
Hitcon 2022, 2023
AIS3 2022
SHELL CTF 2022
Google CTF 2021
NISRA 2021
此 Blog 所使用的圖片大多都來自 這裡 、自行攝影或經作者同意使用,如果有需要標明出處、作者等等資訊或者覺得有不當使用的地方等等,可以聯絡我討論,謝謝!
Randomized Algorithms
Randomized Algorithms
這邊是我對 Randomized Algorithms 的一些筆記與理解。
Lecture 01 : Events and Probability
Outline
Experiment ( 試驗 ) and Sample Space ( 樣本空間 )
Events ( 事件 ) and Probability ( 機率 )
Union Bound ( 布式不等式 )
Experiment
A process to produce an outcome.
Random Experiment
Experiment whose outcome is not known until the process is done.
Sample Space
The set of all outcomes of an experiment.
Events
A subset of the sample space.
Probability
A function Pr to measure the chance for each event to occu ...
耶誕節交換禮物 Web CTF Writeup
耶誕節交換禮物 Web CTF Writeup
這篇大致整理了我 2022/12/24 的解題筆記,再不整理可能 WEB 基礎都要忘光光了 QQ
當天剛好可以報名交換禮物活動但我 ... 懶 XD
Welcome
此題被分類在 Frontend 類別。
網頁分析
網頁上好像沒有什麼有趣的東西,所以我打算開 Burp Suite 檢查看看有沒有攔截到什麼有趣的訊息。
使用 Burp Suite 分析
先開啟一個新的專案,因為我們要攔截流量,所以我們選 Proxy --> HTTP history --> Open Browser ,接著用那個新開的 browser 輸入題目網頁的網址,這時 Burp Suite 應該就會有一些資訊,像是顯示發送出甚麼 request 給 server 之類的。
我們通常會點找有興趣的 request 然後右鍵 Send to Repeater 去檢查發送這個 request 會得到什麼 response 。
接著我們可以點選 Repeater 檢查剛剛轉過去的資料,這邊我們重新送出這個 request 時會發現 response 會 ...
程式安全 Computer Security 2023 FALL tool
程式安全 Computer Security 2023 FALL tool
目前應該是按照我解出的順序整理 writeup 。
發現平臺被默默放上兩題,但是分數都是 0 ,應該是工具相關的練習
tool, web-practice, 0
tool, pwntools-practice, 0
tool, web-practice, 0
http://edu-ctf.csie.org:54321/
這題有給網頁後端的 source code 如下:
123456789101112131415161718192021222324252627282930313233import osimport http.serverimport socketserverfrom datetime import datetimePORT = 54321class Handler(http.server.SimpleHTTPRequestHandler): def do_GET(self): print(f'GET {self.client_address[0]& ...
程式安全 Computer Security 2023 FALL hw0
程式安全 Computer Security 2023 FALL hw0
目前應該是按照我解出的順序整理 writeup 。
加簽路途中經過的 XX 小徑
去程
回程
HW0, Baby Hook, 20
1nc edu-ctf.zoolab.org 10002
會拿到一個壓縮檔 hw0-pwn_92b26057bc6668d5.zip ,解壓縮之後進去可以翻到以下檔案以及資料夾:
這樣看來應該是要把 docker build 起來,所以就直接 build ,並且下 -d 使其可以再背景執行: ( 要先安裝 docker 跟 docker-compose )
12sudo docker-compose buildsudo docker-compose up -d
接下來要做的就是察看 container id 並利用該 id 進入 container 的指令介面。
查看 container id :
1sudo docker ps -a
進入 container 指令介面:
1sudo docker exec -it <container_id> ...