ほとんどのCTF情報はCTF Timeに記載されている。 jeopardy方式のみ。チェックボックスは履修済みかどうか。
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| """ | |
| @file patmake.py | |
| @brief Creates a pattern file from a database | |
| @author neat | |
| """ | |
| import os | |
| import idautils | |
| import ida_bytes | |
| import ida_funcs |
一桌菜,十几盘,有荤有素,有凉有热,怎么吃呢?你可以找一盘看起来好吃的,也可以找一盘离自己近的,都行。但是,得动筷子。不管怎么吃,最重要的是得动筷子。学技术也是一样。
有的人死活不动筷子,还不断念叨:“我要开始吃了。我马上就要开始吃了。我只要开始吃就能吃饱。我吃饱了就不饿了。你能不能告诉我该先吃哪一盘?先冷盘后热菜再喝汤这样是不是最好?但是我听说广东人都是先喝汤?这盘菜会不会太远了?这盘会不会太油腻?我吃饱了万一想拉屎你们这里有厕所吗?我真的马上就要开始吃了……为什么我现在还是饿?你能不能帮帮我?”
by tombkeeper @2017-11-28
如需配合目录食用请访问这里
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| rule mutex_before_file | |
| { | |
| strings: | |
| $sA = "bad.gcc" nocase | |
| $sZ = "mutex" nocase | |
| condition: | |
| (@sZ[1] < @sA[1]) | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import collections | |
| import string | |
| import sys | |
| def hextobin(string): | |
| bin_str='' | |
| split_str=list(string) | |
| for i in split_str: | |
| temp1=str(bin(int(i,16))[2:].zfill(4)) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| """ | |
| The shellcode in Challege 6 compares the string in RDI | |
| against a bunch of conditions. This script extracts the | |
| conditions and solves the constraints, yielding the | |
| expected string. | |
| """ | |
| from idaapi import * | |
| from williutils import * | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| from idaapi import * | |
| GEN_REG = 0x1 | |
| MEM_REF = 0x2 | |
| BASE_INDEX = 0x3 | |
| BASE_INDEX_DISP = 0x4 | |
| IMMED = 0x5 | |
| def doone(ea): | |
| xrefs = [] |
- https://github.com/003random/003Recon
- https://github.com/0x09AL/RdpThief
- https://github.com/0x27/ssh_keyscanner
- https://github.com/0x4a0x72/pwnedless
- https://github.com/0x4D31/fatt
- https://github.com/0x4D31/honeyLambda
- https://github.com/0x6d69636b/windows_hardening
- https://github.com/0x90/miranda-upnp