/PwnProjects

Pwn题刷题记录

Primary LanguagePython

PwnProjects

CTF Pwn 刷题记录，不断更新中...

PWN环境

工具指南

刷题记录

Platform 1 - JarvisOJ

Jarvis OJ is a CTF training platform developed by Jarvis from USSLab in ZJU. This platform will collect or make a series of problems having a good quality for CTFers to solve. Hope you can improve your security skills in this platform and enjoy it.

Platform 2 - ROP Emporium

Learn return-oriented programming through a series of challenges.

Challenge 1 - ret2win : WriteUp

ret2win means "return here to win" and it's recommended you start with this challenge. Visit the challenge page by clicking this card to learn more.

Challenge 2 - split : WriteUp

ret2win means "return here to win" and it's recommended you start with this challenge. Visit the challenge page by clicking this card to learn more.

Challenge 3 - callme : WriteUp

Chain calls to multiple imported methods with specific arguments and see how the differences between 64 & 32 bit calling conventions affect your ROP chain.

Challenge 4 - write4 : WriteUp

Find and manipulate gadgets to construct an arbitrary write primitive, then use it to learn where and how to get your data into process memory.

Challenge 5 - badchars : WriteUp

Learn to deal with "badchars": characters that will not make it into process memory intact or cause other issues such as premature chain termination.

Challenge 6 - fluff : WriteUp

Sort the useful gadgets from the fluff to construct another write primitive in this challenge. You'll have to get creative though, the gadgets aren't straightforward.

Challenge 7 - pivot : WriteUp

Stack space is at a premium in this challenge and you'll have to pivot the stack onto a second ROP chain elsewhere in memory to ensure your success.

Challenge 8 - ret2csu : WriteUp

Learn a ROP technique that lets you populate useful calling convention registers like rdi, rsi and rdx even in an environment where gadgets are sparse.

Platform 3 - pwnable

Pwnable.tw is a wargame site for hackers to test and expand their binary exploiting skills.

easy_csu