| ########################################################### | |
| ## https://www.reddit.com/r/cybersecurity/comments/iu17uu/cybersec_cheat_sheets_in_all_flavors_huge_list/ | |
| ########################################################### | |
| Posted byu/HeyGuyGuyGuy | |
| 12 days ago | |
| Cybersec Cheat Sheets in all Flavors! (Huge List Inside) | |
| "UGH! Whats the command to [insert function here]?" | |
| ########################################################### |
I played Harekaze Mini CTF 2020 for about 3 hours this weekend. The pwn challenges were nice (I especially enjoyed nm-game-extreme). Here are some short writeups.
The program just tells you to provide shellcode that will execute execve("/bin/sh", NULL, NULL). It gives you the address of the "/bin/sh" string, so you just create shellcode to do the job and send it:
#!/usr/bin/env python3
from pwn import *
Note: This was originally extracted from the HTML returned from the https://xferrecords.com/api/update_check/serum API, converted to markdown, and then formatted manually / cleaned up a bit further. It probably won't be kept strictly up to date, but it should at least serve as a useful historical record.
Note: For releases that I had access to the *.exe/*.dmg/*.pkg files for, I have also included the SHA256 hashes of the official downloads; so that they can be used to verify the authenticity of any versions that you might come across. At time of writing, the first version below that includes the hashes is 1.36b8 (October 11 2023)
