SROP
SROP Note
SROP Sigreturn-Oriented Programming
Signal 機制
Signal 機制 (軟中斷訊號、軟中斷) 是類 UNIX 系統中 process 之間相互傳遞信息的一種方法。比方說: process 之間可以通過 system 調用 kill 來發送值軟中斷信號。
信號機制常見步驟:
步驟 1 :
Kernel 向某 process 發送 signal 機制,該 process 會暫時被 hang (掛起) ,進入 kernel 態。
步驟 2 :
Kernel 會為該 process 保存一些資訊,會把以下資訊壓入 stack 中:
所有 register 值。
Signal 信息。
指向 sigreturn 的系統調用位址。
此部分是在 user process 的 address area 。
之後會跳轉到 Signal Handler 中處理相應的 signal 。
Signal Frame 會因為架構的不同而不同。
步驟 3 :
當 Signal Handler 執行完之後, Signal Handler 返 ...
Asymmetric Encryption
Asymmetric Encryption
Slide
Crypto Practice 1
Crypto Practice 1
About this slide
Presenter:
Sharkkcode
Location:
CCU
Date:
Oct. 18, 2022
Slide
Binary Exploitation 2
Binary Exploitation 2
About this slide
Presenter:
Sharkkcode
Location:
CCU
Date:
Oct. 7, 2022
Slide
Binary Exploitation 1
Binary Exploitation 1
About this slide
Presenter:
Sharkkcode
Location:
CCU
Date:
Sep. 27, 2022
Slide
Artificial Neural Network
Artificial Neural Network
About this slide
This is the slide I presented on Apr. 25, 2022 , at CCU .
Slide
Big Data Visualization with Apache Spark and D3JS
Big Data Visualization with Apache Spark and D3JS
About this slide
CCU MIS Project
110_1 ~ 110_2
Slide
pwnable tw start
pwnable tw start
題目說明與網址:
nc chall.pwnable.tw 10000
https://pwnable.tw/static/chall/start
解題過程:
檢查檔案防護:
反組譯執行檔,以下顯示部分執行區段內容:
1234567891011121314151617181920212223242526272829 entry _elfSectionHeaders::0000003408048060 54 PUSH ESP=>local_408048061 68 9d 80 PUSH _exit 04 0808048066 31 c0 XOR EAX,EAX08048068 31 db XOR EBX,EBX0804806a 31 c9 XOR ECX, ...
SHELL CTF 2022
SHELL CTF 2022 writeups
Sanity Check
10 points
Problem Description
Check the #announcement channel of the discord server.
Solution
Found the flag in the discord server
How to defeat a dragon
100 points
Problem Description
Dragonairre,the dragon with the hexadecimal head has attacked the village to take revenge on his last defeat,we need to get the ultimate weapon. Flag Format : SHELLCTF{}.
Given File
vault
Solution
Check file
Disassemble & Decompile & Reverse
main
12345678 ...
CTF Introduction
CTF Introduction
CTF (Capture The Flag) is a competition of information security including types like Reverse, PWN, Web, Crypto, Forensic, etc. There are three main kinds of CTF competition systems: "Jeopardy", "Attack & Defense" and "King of Hill".