<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[tale的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/mayaowen666</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; mayaowen666]]></copyright><item><title><![CDATA[2021-09-24]]></title><link>https://blog.youkuaiyun.com/mayaowen666/article/details/120461614</link><guid>https://blog.youkuaiyun.com/mayaowen666/article/details/120461614</guid><author>mayaowen666</author><pubDate>Fri, 24 Sep 2021 19:54:33 +0800</pubDate><description><![CDATA[攻防世界EasyRE &amp; Guess-the-Number
EasyRE
可执行文件运行让用户“input”
Shift+Fn+F12 打开IDA中字符串视图，定位“input”在函数sub_401080中

主函数源码如下：
int sub_401080()
{
  unsigned int v0; // kr00_4
  signed int v1; // edx
  char *v2; // esi
  char v3; // al
  unsigned int v4; // edx
  in]]></description><category></category></item><item><title><![CDATA[2021-09-16]]></title><link>https://blog.youkuaiyun.com/mayaowen666/article/details/120339295</link><guid>https://blog.youkuaiyun.com/mayaowen666/article/details/120339295</guid><author>mayaowen666</author><pubDate>Thu, 16 Sep 2021 23:04:30 +0800</pubDate><description><![CDATA[2019_UNCTF 666
很简单的代码审计加解密，快速水一篇睡觉了23333
main函数
int __cdecl main(int argc, const char **argv, const char **envp)
{
  char s; // [rsp+0h] [rbp-1E0h]
  char v5; // [rsp+F0h] [rbp-F0h]

  memset(&amp;s, 0, 0x1EuLL);				//给s初始化内存
  printf("Please Input Key: ",]]></description><category></category></item><item><title><![CDATA[2021-09-14]]></title><link>https://blog.youkuaiyun.com/mayaowen666/article/details/120297816</link><guid>https://blog.youkuaiyun.com/mayaowen666/article/details/120297816</guid><author>mayaowen666</author><pubDate>Tue, 14 Sep 2021 22:29:32 +0800</pubDate><description><![CDATA[elrond32
丢进exeInfoPe，32位无壳，IDA分析
主函数很简约
int __cdecl main(int a1, char **a2)
{
  if ( a1 &gt; 1 &amp;&amp; sub_8048414(a2[1], 0) )
  {
    puts("Access granted");		//进入if语句可以get flag
    sub_8048538((int)a2[1]);
  }
  else
  {
    puts("Access denied");
  }]]></description><category></category></item><item><title><![CDATA[2021-09-13]]></title><link>https://blog.youkuaiyun.com/mayaowen666/article/details/120275282</link><guid>https://blog.youkuaiyun.com/mayaowen666/article/details/120275282</guid><author>mayaowen666</author><pubDate>Mon, 13 Sep 2021 21:30:10 +0800</pubDate><description><![CDATA[CSAW2013reversing2
尝试打开可执行文件，返回Flag弹窗，可惜是乱码
丢进exeinfoPe，32位无壳，IDA分析
int __cdecl __noreturn main(int argc, const char **argv, const char **envp)
{
  int v3; // ecx
  CHAR *lpMem; // [esp+8h] [ebp-Ch]
  HANDLE hHeap; // [esp+10h] [ebp-4h]

  hHeap = HeapCrea]]></description><category></category></item></channel></rss>