From 0e6ff10f8d755ae09b9bf1625dcb43fb2a4cbda6 Mon Sep 17 00:00:00 2001 From: firmianay Date: Fri, 5 Jan 2018 17:42:13 +0800 Subject: [PATCH] add 6.1.10 --- README.md | 1 + SUMMARY.md | 1 + doc/6.1.10_0ctf2017_babyheap2017.md | 8 ++++++++ doc/6_writeup.md | 1 + .../6.1.10_0ctf2017_babyheap2017/babyheap | Bin 0 -> 10232 bytes 5 files changed, 11 insertions(+) create mode 100644 doc/6.1.10_0ctf2017_babyheap2017.md create mode 100755 src/writeup/6.1.10_0ctf2017_babyheap2017/babyheap diff --git a/README.md b/README.md index 76ce998..f2427e9 100644 --- a/README.md +++ b/README.md @@ -110,6 +110,7 @@ - [6.1.7 pwn 0CTF2015 freenote](doc/6.1.7_pwn_0ctf2015_freenote.md) - [6.1.8 pwn DCTF2017 Flex](doc/6.1.8_pwn_dctf2017_flex.md) - [6.1.9 pwn RHme3 Exploitation](doc/6.1.9_rhme3_exploitation.md) + - [6.1.10 pwn 0CTF2017 BabyHeap2017](doc/6.1.10_0ctf2017_babyheap2017.md) - re - [6.2.1 re XHPCTF2017 dont_panic](doc/6.2.1_re_xhpctf2017_dont_panic.md) - [6.2.2 re ECTF2016 tayy](doc/6.2.2_re_ectf2016_tayy.md) diff --git a/SUMMARY.md b/SUMMARY.md index 020c6ef..e6117cf 100644 --- a/SUMMARY.md +++ b/SUMMARY.md @@ -98,6 +98,7 @@ GitHub 地址：https://github.com/firmianay/CTF-All-In-One * [6.1.7 pwn 0CTF2015 freenote](doc/6.1.7_pwn_0ctf2015_freenote.md) * [6.1.8 pwn DCTF2017 Flex](doc/6.1.8_pwn_dctf2017_flex.md) * [6.1.9 pwn RHme3 Exploitation](doc/6.1.9_rhme3_exploitation.md) + * [6.1.10 pwn 0CTF2017 BabyHeap2017](doc/6.1.10_0ctf2017_babyheap2017.md) * re * [6.2.1 re XHPCTF2017 dont_panic](doc/6.2.1_re_xhpctf2017_dont_panic.md) * [6.2.2 re ECTF2016 tayy](doc/6.2.2_re_ectf2016_tayy.md) diff --git a/doc/6.1.10_0ctf2017_babyheap2017.md b/doc/6.1.10_0ctf2017_babyheap2017.md new file mode 100644 index 0000000..99bc195 --- /dev/null +++ b/doc/6.1.10_0ctf2017_babyheap2017.md @@ -0,0 +1,8 @@ +# 6.1.10 pwn 0CTF2017 BabyHeap2017 + +- [题目解析](#题目解析) + + +[下载文件](../src/writeup/6.1.10_0ctf2017_babyheap2017) + +## 题目解析 diff --git a/doc/6_writeup.md b/doc/6_writeup.md index 36c00f6..7f7054b 100644 --- a/doc/6_writeup.md +++ b/doc/6_writeup.md @@ -10,6 +10,7 @@ - [6.1.7 pwn 0CTF2015 freenote](6.1.7_pwn_0ctf2015_freenote.md) - [6.1.8 pwn DCTF2017 Flex](6.1.8_pwn_dctf2017_flex.md) - [6.1.9 pwn RHme3 Exploitation](6.1.9_rhme3_exploitation.md) + - [6.1.10 pwn 0CTF2017 BabyHeap2017](6.1.10_0ctf2017_babyheap2017.md) - re - [6.2.1 re XHPCTF2017 dont_panic](6.2.1_re_xhpctf2017_dont_panic.md) - [6.2.2 re ECTF2016 tayy](6.2.2_re_ectf2016_tayy.md) diff --git a/src/writeup/6.1.10_0ctf2017_babyheap2017/babyheap b/src/writeup/6.1.10_0ctf2017_babyheap2017/babyheap new file mode 100755 index 0000000000000000000000000000000000000000..c7e98ce60f57e88a5176d0f84723c5ee135e15d7 GIT binary patch literal 10232 zcmeHNeQ;FO6~CJh317Pl4M;(ThXXBGSrP~k)Rb(J#RmhH(xkN`xNNc;vbxz#_X8po ziL>Bjy96^1RXSQrJB(wkP8r9klC~H=hES_cXw{)=os1P(h&q`OHC1H$JNMnQd3h$l zA5J@+;bz`D_x{euJ@?#u&wcN0wtH5u$g|l5mwfSEL9L3h22!CIWwTTTq(YR5F}P0` z)5JAs7f8(DR~Q6bqYNn1ObZpB4>}50S)Kt{>2*quDSJqi`WvYnyVl?^6+)8$>5;FE zGh`D~lNF{f^5^>=R`Jzq2 z7mtKQeJBzOh)8oF43+v8pSK|x_Jx9510oiPZ>~!;047hU<7nL55NLU&43h%1T z-gQc@D&&jB0vIQ$5379Z>XnsM-i5AG!L^01#YT+t1mzC8=gT|Qj6VZ4xJKP3Y~a}- z&y@3AQ7|}xGS0PN5|)@2L?*}+vq%_)&jDTs6|~S$npM7MTqwNIGT+?3eWoV$C>N7w zTsE3;%57X4O*rRr;x(Ia^Lf`|!p-@<)r5~`y@`FM>T~Izn6Z+1sctIv9!DEF- zi91-bi+?j&6WKZYad*tDK#kfB9fR~K)&6hMXH|cll9qh9GIjD!J@u}he6N3P&Fc1o z&#|2J_6bQz$`4|ZW**6Av*#NeGpmVH{tGDT?FB??^?3t&>a?C5uy3A>aJ*4ugk#Kx zY_B1|;V6x|!R45_Lk0!b-ZO8SK7voc5Y$C}aw&M+B zhQ8HaYxyjQiNv?{WceBN4wq7=7rym;VyL3uG*_3=%2NvE;U6qUAch zeNAuLbF7p0l%9GO9i4*`Cc+sX`y%|zW+p)#65yO5PI^tR-ibNg1Mj-@)Cv8wclA^c zLhjN#MR84SZ7mEret$%tcbK?X?>3>&5&ck2c}_q*L-66uXuWg7U(4GMy#4n=G7&t| ziZq~z@1XiFquz?T z5!FWlbZjteCO^>h)V55wrystGvre2XX-~gi-$RkIb&*4dd$CfFz`YDwX|c1*vGX)! z;lk3KNgXB)fabLrsMW8#LDBG^(Lt=)R9*5o4kuIockpjt`kbwHNUIl;+b)RvbjZAwlX(d;Y0m|{{=_BC>*)$7HV%dTE^LXuQ60k#=-!;! zSgz~IgIzn?UXla4fB|*M0ioZKR|^K@*tz#|a@`Q1*j&Pt-d!Od1}-fmN7$W7{aXcO zB*$Ql(uf!?06)cGjo3$F#;6rxE2lg%_KvonLlLup0HiPHbz0DjZo+KMht-VjvVNs? zEZ9qhVQ>!fF^4ex4qVGTIWTl}It{nom_gcIM(g?90`-t;a-d+#M!mggCj|nh+g=z- zkIJLjY%fTof$g5{HFijM=2hAc3%T_fc4*&hZgnDs^-bZ{Gqh6*WtV;V9eqj5mPsXg zvDte?VzeQ0x2}>;-&$Dc)xU%EL#a1i+ppVBQszm$`XafQ`QkHEuGl^;^E(5~#}euyQI| zrLXQDO%M2*wP09VSX{DHlek#m4{TnLi2B0*NRudWX>NMa_2Er)p-Wp4428rZPF)>oTEy!l$+7*smvj2Z0G|NgX4cQUkmJ7x{%;XynvX&K?i_y<^lA}*I!Xrl9XbAN z@a3sKg#SQ}Uk(0Z%-i3F@L$RC{otPgf7=j#OOC$-{A$eesv&%j@eQI+<&y9#uB@dMZB_Oj&YHTH_Az07SdcH8Gx+BL{QzS3SO*To00 zvk!K#OsdGd#Q@YCD}fu9K~Z3^Q8*DH_7(nijT(z z*=E1k?$^%OOI*dJuF`o1 zPS5a5ikB2G6T%g1jK!mIU!8E_7pp+DS-8THc);bZTsc4P+oW2X!UuFboXvq~jDFsdVyfWNP#-SD}bvxWZYbvBB;azEx6;S zt{@~M@+T};pwZh9^)&^&jeh8J%h31wqEX*Hh6dN~s)rbQ@HGYNQK6r~T=*4Cxa#q` zfmevHX_jao(U#(8xiVE@%KMhP3rO)|=_dT2aE-DlQ*5`b~bf03-Hl`};bADI>jP^9^bN*t= z`3fSkSmSpaP|6*w&-sF>)qj>_dI$6=7jc{O5z}I$Tlv2u)HnODU~v~J6jRpENo9T9o{sE=Ww8NxJ zRqOcMEc&_sH&O@ABtCeQ9qv~(#cqo}pN~xWTw!_Z`1dG%j{n9YLz3y!tf;6}|1pcc z_5XEtTt@#Xi++bXNST(hW6F*-e$N4?-%t5mRwcQ0>he@BG7n)}PM6t?S z+w?9@>xcVqQRiUG73$Ns09w1O&*v!rpH&wbN8$C&{qs6Vf@kiZpEoLIN;T1Cklda1 znZ5~*Szl U?%UuP_iD|cADKbaS&!lW0Dcn-!2kdN literal 0 HcmV?d00001