hhc0null

int data_804b078 = 100; // Doraemon HP
int bss_804b080; // fd
char bss_804b0a0[5000]; // buffer

// error message.
void sub_804889d(char *arg0)
{
    fprintf(bss_804b080, "%s\n", arg0);
    exit(EXIT_FAILURE);
}

hhc0null

#!/usr/bin/env python2

"""Usage:
    gizmo.py [-h] [-o NAME] [-r NUMBER] PATH
    gizmo.py --version

Arguments:
    PATH    source path

Options:

hhc0null

// DEP, ASLR, SSP

#include <ctype.h>
#include <stdlib.h>
#include <stdio.h>
#include <unistd.h>

#define not(x) (!(x))

extern char **environ;

hhc0null

// checked
void sub_400976(arg0) 
{
    // Local variables.
    rbp_28h;
    rbp_10h;
    rbp_08h;

    rbp_28h = arg0;
    rbp_10h = 0;

hhc0null

#!/usr/bin/env python2

import binascii
import re
import socket
import struct
import sys
import telnetlib
import time

hhc0null

int main()
{
    // Local variables.
    int rsp_04h;

    setvbuf(stdin, 0, 2); // maybe
    setvbuf(stdout, 0, 2); // maybe

    puts("\n   ______\n  | |__| |  WELCOME TO THE\n  |  ()  |  UNTRUSTED COMPUTING SERVICE\n  |______|  V0.0.1a\n\nLOAD PROGRAM");

hhc0null

int sub_400d5d(arg0)
{
    rbp_18h = arg0;
    rbp_08h = rbp_18h ^ 0xdead;
    return rbp_08h;
}

void sub_400d79()
{
    // Local variables.

hhc0null

// [0ctf 2015 quals] exploit-freenote-400pts

/*
 * memo of bss_6020a8h.
 *     offset_00h: limit number of memo.
 *     offset_08h: current number of memo.
 *     offset_10h[memo_limit]: content.
 */

const unsigned long long memo_limit = 0x100;

hhc0null

#!/usr/bin/env python2

import binascii
import re
import socket
import struct
import subprocess
import sys
import telnetlib
import time

hhc0null

// [0CTF 2015 Quals] Exploit-Login-300pts

int sub_cb5(char *arg0, int arg1)
{
    // Local variables.
    int rbp_1ch;
    char *rbp_18h;

    rbp_18h = arg0;
    rbp_1ch = arg1;