nganhkhoa/CTF-All-In-One
1
0
Fork 0
mirror of https://github.com/nganhkhoa/CTF-All-In-One.git synced 2025-06-23 11:45:04 +07:00
Code Issues Projects Releases Wiki Activity

add 7.1.9

Browse Source
This commit is contained in:
firmianay
2018-05-19 21:22:04 +08:00
parent f1c51d8ea3
commit 60c75b44da
14 changed files with 277 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
doc/2.2.2_idapro.md
View File

@ -25,6 +25,7 @@
- [SimplifyGraph](https://github.com/fireeye/SimplifyGraph) -- 简化复杂的函数流程图
- [bincat](https://github.com/airbus-seclab/bincat) -- 静态二进制代码分析工具包，2017 Hex-Rays 插件第一名
- [golang_loader_assist](https://github.com/strazzere/golang_loader_assist) -- Golang编译的二进制文件分析助手
- [BinDiff](https://www.zynamics.com/bindiff.html)
## 常用脚本

2
doc/7.1.1_tcpdump_2017-11543.md
View File

@ -1,4 +1,4 @@
# 7.1.1 [CVE-2017-11543] tcpdump 4.9.0 Buffer Overflow
# 7.1.1 CVE-2017-11543 tcpdump sliplink_print 栈溢出漏洞
- [漏洞描述](#漏洞描述)
- [漏洞复现](#漏洞复现)

2
doc/7.1.2_glibc_2015-0235.md
View File

@ -1,4 +1,4 @@
# 7.1.2 [CVE-2015-0235] glibc 2.17 Buffer Overflow
# 7.1.2 CVE-2015-0235 glibc __nss_hostname_digits_dots 堆溢出漏洞
- [漏洞描述](#漏洞描述)
- [漏洞复现](#漏洞复现)

2
doc/7.1.3_wget_2016-4971.md
View File

@ -1,4 +1,4 @@
# 7.1.3 [CVE-2016-4971] wget 1.17.1 Arbitrary File Upload
# 7.1.3 CVE-2016-4971 wget 任意文件上传漏洞
- [漏洞描述](#漏洞描述)
- [漏洞复现](#漏洞复现)

2
doc/7.1.4_wget_2017-13089.md
View File

@ -1,4 +1,4 @@
# 7.1.4 [CVE-2017-13089] wget 1.19.1 Buffer Overflow
# 7.1.4 CVE-2017-13089 wget skip_short_body 栈溢出漏洞
- [漏洞描述](#漏洞描述)
- [漏洞复现](#漏洞复现)

2
doc/7.1.5_glibc_2018-1000001.md
View File

@ -1,4 +1,4 @@
# 7.1.5 [CVE–2018-1000001] glibc Buffer Underflow
# 7.1.5 CVE–2018-1000001 glibc realpath 缓冲区下溢漏洞
- [漏洞描述](#漏洞描述)
- [漏洞复现](#漏洞复现)

2
doc/7.1.6_dnstracer_2017-9430.md
View File

@ -1,4 +1,4 @@
# 7.1.6 [CVE-2017-9430] DNSTracer 1.9 Buffer Overflow
# 7.1.6 CVE-2017-9430 DNSTracer 栈溢出漏洞
- [漏洞描述](#漏洞描述)
- [漏洞复现](#漏洞复现)

2
doc/7.1.7_binutils_2018-6323.md
View File

@ -1,4 +1,4 @@
# 7.1.7 [CVE-2018-6323] GNU binutils 2.29.1 Integer Overflow
# 7.1.7 CVE-2018-6323 GNU binutils elf_object_p 整型溢出漏洞
- [漏洞描述](#漏洞描述)
- [漏洞复现](#漏洞复现)

18
doc/7.1.9_ms_word_2010-2333.md Normal file
View File

@ -0,0 +1,18 @@
# 7.1.9 CVE-2010-2333 Microsoft Word RTF pFragments 栈溢出漏洞
- [漏洞描述](#漏洞描述)
- [漏洞复现](#漏洞复现)
- [漏洞分析](#漏洞分析)
- [参考资料](#参考资料)
[下载文件](../src/exploit/7.1.9_ms_word_2010-2333)
## 漏洞描述
## 漏洞复现
## 漏洞分析
## 参考资料
- https://www.cvedetails.com/cve/CVE-2010-2333

17
doc/7_exploit.md
View File

@ -1,12 +1,13 @@
# 第七篇 实战篇
* CVE
* [7.1.1 [CVE-2017-11543] tcpdump 4.9.0 Buffer Overflow](7.1.1_tcpdump_2017-11543.md)
* [7.1.2 [CVE-2015-0235] glibc 2.17 Buffer Overflow](7.1.2_glibc_2015-0235.md)
* [7.1.3 [CVE-2016-4971] wget 1.17.1 Arbitrary File Upload](7.1.3_wget_2016-4971.md)
* [7.1.4 [CVE-2017-13089] wget 1.19.1 Buffer Overflow](7.1.4_wget_2017-13089.md)
* [7.1.5 [CVE–2018-1000001] glibc Buffer Underflow](7.1.5_glibc_2018-1000001.md)
* [7.1.6 [CVE-2017-9430] DNSTracer 1.9 Buffer Overflow](7.1.6_dnstracer_2017-9430.md)
* [7.1.7 [CVE-2018-6323] GNU binutils 2.26.1 Integer Overflow](7.1.7_binutils_2018-6323.md)
* [7.1.8 [CVE-2010-2883] Adobe Reader 9.3.4 Stack Buffer Overflow](7.1.8_adobe_reader_2010-2883.md)
* [7.1.1 CVE-2017-11543 tcpdump sliplink_print 栈溢出漏洞](7.1.1_tcpdump_2017-11543.md)
* [7.1.2 CVE-2015-0235 glibc __nss_hostname_digits_dots 堆溢出漏洞](7.1.2_glibc_2015-0235.md)
* [7.1.3 CVE-2016-4971 wget 任意文件上传漏洞](7.1.3_wget_2016-4971.md)
* [7.1.4 CVE-2017-13089 wget skip_short_body 栈溢出漏洞](7.1.4_wget_2017-13089.md)
* [7.1.5 CVE–2018-1000001 glibc realpath 缓冲区下溢漏洞](7.1.5_glibc_2018-1000001.md)
* [7.1.6 CVE-2017-9430 DNSTracer 栈溢出漏洞](7.1.6_dnstracer_2017-9430.md)
* [7.1.7 CVE-2018-6323 GNU binutils elf_object_p 整型溢出漏洞](7.1.7_binutils_2018-6323.md)
* [7.1.8 CVE-2010-2883 Adobe CoolType SING 表栈溢出漏洞](7.1.8_adobe_reader_2010-2883.md)
* [7.1.9 CVE-2010-2333 Microsoft Word RTF pFragments 栈溢出漏洞](7.1.9_ms_word_2010-2333.md)
* Malware

4
doc/9.2_wintools.md
View File

@ -9,6 +9,7 @@
- [Resource Hacker](#resource-hacker)
- [wxHexEditor](#wxhexeditor)
- [PDF Stream Dumper](#pdf-stream-dumper)
- [EMET](#emet)
## 010 Editor
@ -39,3 +40,6 @@ http://www.wxhexeditor.org/
## PDF Stream Dumper
http://sandsprite.com/blogs/index.php?uid=7&pid=57
## EMET
https://support.microsoft.com/en-us/help/2458544/the-enhanced-mitigation-experience-toolkit