MeePwnCTF 2018 Qual Pwn Coin Write-up

July 26, 2018dangokyo Leave a comment

Introduction

This is a very interesting challenge. Generally speaking, this is not a very hard challenge because its vulnerability is very obvious. However, this challenge is not that easy to exploit. First of all, the logic of the programme is very complicated and hard to reverse. Secondly, the exploitation involves multiple exploitation tricks in the end. Thirdly, the exploitation involves many double-to-integer conversion. Continue reading “MeePwnCTF 2018 Qual Pwn Coin Write-up” →

MeePwnCTF 2018 Qual Web+PWN 0xBADMINTON Write-up

July 18, 2018dangokyo Leave a comment

Introduction

As an enthusiast badminton player, I decide to add a cover page for this write-up. As a CTF player, I think it’s necessary to write a wp for this challenge. This challenge is not hard after reading the write-up given on [1]. But I think there are still a lot of things to learn in the field of web security.
Continue reading “MeePwnCTF 2018 Qual Web+PWN 0xBADMINTON Write-up” →

MeePwnCTF 2018 Qual Web Pycalcx2 Write-up

July 17, 2018dangokyo Leave a comment

Introduction

This post is also based on the write-up given by p4[1] Continue reading “MeePwnCTF 2018 Qual Web Pycalcx2 Write-up” →

MeePwnCTF 2018 Qual Web Pycalcx Write-up

July 17, 2018dangokyo Leave a comment

Introduction

This post is based on the write-up given by p4 team [1]. Continue reading “MeePwnCTF 2018 Qual Web Pycalcx Write-up” →

MeePwnCTF 2018 Qual Re Image_Crackme

July 16, 2018dangokyo Leave a comment

Introduction

The programme implements a simple logic in image processing. Since I started to learn GO binary just from CrossCTF, I spend a lot of time reversing the logic of the challenge.
Continue reading “MeePwnCTF 2018 Qual Re Image_Crackme” →

MeePwnCTF 2018 Qual PWN House-of-Cards Write-up

July 16, 2018July 16, 2018dangokyo 5 Comments

Introduction

It is the only middle score challenge I solve in MeePwn CTF this time. The challenge is a routine menu challenge. The annoying part of this challenge is the complexity of malloc/free operation in each operation in this challenge. I think my exploit make things complicated again , I think it is necessary to record my thoughts during the exploitation.
Continue reading “MeePwnCTF 2018 Qual PWN House-of-Cards Write-up” →

GoogleCTF 2018 Qual PWN EXECVE-Sandbox Write-up

July 12, 2018July 12, 2018dangokyo Leave a comment

Introduction

After my tutorial on seccomp, thanks for Google CTF for providing such good challenges to learn something new about seccomp escape. Since I was unable to play in Google CTF in time. I think it is necessary to record the challenges.
This post will give the write-up for the execve-sandbox in GoogleCTF. And my write-up is based on [1] and [2]. Continue reading “GoogleCTF 2018 Qual PWN EXECVE-Sandbox Write-up” →

氷菓

Author dangokyo

MeePwnCTF 2018 Qual Pwn Coin Write-up

Introduction

MeePwnCTF 2018 Qual Web+PWN 0xBADMINTON Write-up

Introduction

MeePwnCTF 2018 Qual Web Pycalcx2 Write-up

Introduction

MeePwnCTF 2018 Qual Web Pycalcx Write-up

Introduction

MeePwnCTF 2018 Qual Re Image_Crackme

Introduction

MeePwnCTF 2018 Qual PWN House-of-Cards Write-up

Introduction

GoogleCTF 2018 Qual PWN EXECVE-Sandbox Write-up

Introduction