<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[Probeginner的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/Probeginner</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; Probeginner]]></copyright><item><title><![CDATA[远控免杀笔记（持续更新中........）]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/155922771</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/155922771</guid><author>Probeginner</author><pubDate>Mon, 15 Dec 2025 00:51:00 +0800</pubDate><description><![CDATA[声明：学习记录，供各位借鉴少走弯路，被非法利用本人不负责。文介绍了在获取meterpreter会话后如何提升权限的方法。通过&quot;windows/meterpreter/reverse_tcp&quot;模块控制目标后，通常只能获得普通用户权限。文中详细说明了利用ms16模块进行提权的步骤：首先在meterpreter会话中输入background保存会话，然后在ms16模块中绑定session1进行操作。通过图文展示了完整的提权过程，最终成功获得系统权限。该方法适用于Windows系统权限提升场景。]]></description><category></category></item><item><title><![CDATA[第五届“强网”拟态防御之PWN1与近段时间对unlink的理解]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/127719988</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/127719988</guid><author>Probeginner</author><pubDate>Sun, 06 Nov 2022 20:03:52 +0800</pubDate><description><![CDATA[来个拟态防御简单一题]]></description><category></category></item><item><title><![CDATA[Ubuntu18学习记录(持续更新中～～～)]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/127560704</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/127560704</guid><author>Probeginner</author><pubDate>Thu, 27 Oct 2022 21:02:53 +0800</pubDate><description><![CDATA[避免虚拟机崩溃]]></description><category></category></item><item><title><![CDATA[Uuntu16 学习记录（持续更新中......）]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/127560647</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/127560647</guid><author>Probeginner</author><pubDate>Thu, 27 Oct 2022 21:00:16 +0800</pubDate><description><![CDATA[学习随意记录，本来不想传到网络上的，但是我怕某一天这个虚拟机突然崩溃～5555]]></description><category></category></item><item><title><![CDATA[对“ciscn_2019_n_3“的理解]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/125623444</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/125623444</guid><author>Probeginner</author><pubDate>Tue, 05 Jul 2022 17:11:58 +0800</pubDate><description><![CDATA[fastbin（ size attack）简单实践]]></description><category></category></item><item><title><![CDATA[从babyfengshui_33c3_2016中提升抽象能力]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/125562534</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/125562534</guid><author>Probeginner</author><pubDate>Fri, 01 Jul 2022 17:28:43 +0800</pubDate><description><![CDATA[堆学习，写功能，修改被写地址]]></description><category></category></item><item><title><![CDATA[关于利用alpha3生成可打印shellcode的报错的解决]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/125076501</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/125076501</guid><author>Probeginner</author><pubDate>Wed, 01 Jun 2022 02:09:56 +0800</pubDate><description><![CDATA[最开始python sc.py > shellcode执行这条语句老出错，

这后来又是winhex下载又是VMtool安装的，太麻烦的，最后机缘巧合，发现这样可以成功：

直接git clone 而后用python3而不是python2去运行sc.py而后直接 python ./ALPHA~~]]></description><category></category></item><item><title><![CDATA[关于canary的绕过题和ciscn_2019_es_7中看srop的看系统调用]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/125058650</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/125058650</guid><author>Probeginner</author><pubDate>Tue, 31 May 2022 20:47:52 +0800</pubDate><description><![CDATA[做题经过前辈已经总结得很好了，这里就记录一下想法]]></description><category></category></item><item><title><![CDATA[pwn2_sctf_2016的32位和64位、[ZJCTF 2019]EasyHeap 的收获]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/125013099</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/125013099</guid><author>Probeginner</author><pubDate>Sat, 28 May 2022 00:31:26 +0800</pubDate><description><![CDATA[[ZJCTF 2019]EasyHeap


堆菜鸡题后简 结，见谅

查看保护机制：
Arch:     amd64-64-little
RELRO:    Partial RELRO
Stack:    Canary found
NX:       NX enabled
PIE:      No PIE (0x400000)
本题的思路就是：
控制heaparray附近的区域，覆盖heaparray[0]处为free_got的地址，使之被作为chunk看待，edit覆盖free_got地址为syste.]]></description><category></category></item><item><title><![CDATA[关于ubuntu16安装pwndbg的惨痛经历，以及终于找到的解决办法]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/124717539</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/124717539</guid><author>Probeginner</author><pubDate>Wed, 11 May 2022 20:10:36 +0800</pubDate><description><![CDATA[说实话难也不难]]></description><category></category></item><item><title><![CDATA[BUUCTF之“SWPUCTF_2019_login”]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/122271499</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/122271499</guid><author>Probeginner</author><pubDate>Sat, 01 Jan 2022 22:19:21 +0800</pubDate><description><![CDATA[格式化字符串在bss段上的情况：间接修改printf.got表为system，，，
ebp对应的地址映射比较关键]]></description><category></category></item><item><title><![CDATA[BUUCTF之“ciscn_2019_sw_1”]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/122152180</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/122152180</guid><author>Probeginner</author><pubDate>Sun, 26 Dec 2021 10:34:14 +0800</pubDate><description><![CDATA[通过fmt改fini_array为main，更加深入理解程序执行]]></description><category></category></item><item><title><![CDATA[BUUCTF之“xman_2019_format”之特殊剧情：当格式化字符串遇上堆]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/122121139</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/122121139</guid><author>Probeginner</author><pubDate>Fri, 24 Dec 2021 09:45:18 +0800</pubDate><description><![CDATA[格式化字符串在遇到堆的情况]]></description><category></category></item><item><title><![CDATA[BUUCTF之“judgement_mna_2016”]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/122082066</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/122082066</guid><author>Probeginner</author><pubDate>Wed, 22 Dec 2021 11:40:50 +0800</pubDate><description><![CDATA[增强漏洞意识，有时候程序复杂但是抓住漏洞]]></description><category></category></item><item><title><![CDATA[BUUCTF之“wustctf2020_name_your_dog”]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/122080742</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/122080742</guid><author>Probeginner</author><pubDate>Wed, 22 Dec 2021 11:04:53 +0800</pubDate><description><![CDATA[利用两次输入覆盖got.plt表间接执行后门函数]]></description><category></category></item><item><title><![CDATA[BUUCTF之“starctf_2019_babyshell”]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/122073456</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/122073456</guid><author>Probeginner</author><pubDate>Tue, 21 Dec 2021 21:23:46 +0800</pubDate><description><![CDATA[shellcode的强化]]></description><category></category></item><item><title><![CDATA[BUUCTF之“oneshot_tjctf_2016”]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/122069473</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/122069473</guid><author>Probeginner</author><pubDate>Tue, 21 Dec 2021 17:37:18 +0800</pubDate><description><![CDATA[当做onegadget的复习]]></description><category></category></item><item><title><![CDATA[BUUCYF之“wdb2018_guess”]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/122016442</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/122016442</guid><author>Probeginner</author><pubDate>Sat, 18 Dec 2021 20:39:17 +0800</pubDate><description><![CDATA[stack smash的使用]]></description><category></category></item><item><title><![CDATA[BUUCTF之“[极客大挑战 2019]Not Bad 1”]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/121970271</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/121970271</guid><author>Probeginner</author><pubDate>Thu, 16 Dec 2021 11:17:15 +0800</pubDate><description><![CDATA[简单orw]]></description><category></category></item><item><title><![CDATA[BUUCYF之“inndy_echo”接单记录]]></title><link>https://blog.youkuaiyun.com/Probeginner/article/details/121966970</link><guid>https://blog.youkuaiyun.com/Probeginner/article/details/121966970</guid><author>Probeginner</author><pubDate>Thu, 16 Dec 2021 09:12:18 +0800</pubDate><description><![CDATA[32位fmt_payload修改got表]]></description><category></category></item></channel></rss>