mirror of
https://github.com/nganhkhoa/CTF-All-In-One.git
synced 2024-12-25 11:41:16 +07:00
50 lines
1.2 KiB
Markdown
50 lines
1.2 KiB
Markdown
# 8.4 习题答案
|
|
|
|
|
|
## 3.3.1 格式化字符串漏洞
|
|
#### **pwn** - UIUCTF 2017 - goodluck - 200
|
|
|
|
|
|
## 6.1 更多 Linux 工具
|
|
#### Strings - strings_crackme
|
|
```text
|
|
$ strings -e L strings_crackme
|
|
w0wgreat
|
|
```
|
|
|
|
#### **Pwn** - Strings - flag_pwnablekr
|
|
```text
|
|
$ ./flag_pwnablekr
|
|
I will malloc() and strcpy the flag there. take it.
|
|
$ strings flag_pwnablekr | grep UPX
|
|
UPX!
|
|
$Info: This file is packed with the UPX executable packer http://upx.sf.net $
|
|
$Id: UPX 3.08 Copyright (C) 1996-2011 the UPX Team. All Rights Reserved. $
|
|
UPX!
|
|
UPX!
|
|
$ upx -d flag_pwnablekr
|
|
Ultimate Packer for eXecutables
|
|
Copyright (C) 1996 - 2017
|
|
UPX 3.94 Markus Oberhumer, Laszlo Molnar & John Reiser May 12th 2017
|
|
File size Ratio Format Name
|
|
-------------------- ------ ----------- -----------
|
|
883745 <- 335288 37.94% linux/amd64 flag_pwnablekr
|
|
Unpacked 1 file.
|
|
$ strings flag_pwnablekr | grep -i upx
|
|
UPX...? sounds like a delivery service :)
|
|
```
|
|
|
|
#### xxd - xxd_crackme
|
|
```text
|
|
$ xxd -g1 xxd_crackme
|
|
......
|
|
00001020: 00 00 00 00 67 30 30 64 4a 30 42 21 00 00 00 00 ....g00dJ0B!....
|
|
......
|
|
```
|
|
```text
|
|
$ strings -d xxd_crackme
|
|
......
|
|
g00dJ0B!
|
|
......
|
|
```
|