shuimuyq的专栏

/* narnia0.c *//* This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation;

#include #include #include #include #include #include int main(int argc, char *argv[]){ struct sockaddr_in toaddr; /* 0x3c */ int sendstat; /* 0x38 */ int sock; /* 0x34 */ struct hostent

/* behemoth6.c */#include #include #include #include int main(int argc, char *argv[]){ FILE *fp; char *buf; fp = popen("/behemoth/behemoth6_reader", "r"); if (fp == NULL) { puts("Fail

#include #include #include #include extern char **environ;int main(int argc, char *argv[]){ char *argv1 = argv[1]; /* 0x21c */ int envcnt; /* 0x218 */ int slen; /* 0x214 */ char buf[512]

因为utumno0不可读, 开始以为用strace可以获取一些信息最后只是调用write，并没什么用(从这里可以知道库函数puts最后是调用write来实现的)最后利用xocopy把可执行代码dump出来gcc xocopy.c -o xocopy -m32./xocopy /utumno/utumno0./xocopy -a 0x08049000 /utumno/utumno

/* utumno1.c */#include #include /** stack environment of main * env * argv * argc * eip * ebp * align * stack of main *//** stack environment of run * filename + 3 * <== ebp + 0x0

root@today:~# ssh utumno2@178.79.134.250utumno2@178.79.134.250's password: ceewaceiphutumno2@melinda:~$ cd /tmp utumno2@melinda:/tmp$ mkdir utu2utumno2@melinda:/tmp$ cd utu2utumno2@melinda:

┌──────────────────────────────────────────────────────────┐esp+0x38 chr │0x80483fd push %ebp │esp+0x3c cnt │0x80483fe mov %esp,%ebp │es

root@today:~/Desktop/misc/utumno/utumno5# ssh utumno5@178.79.134.250utumno5@178.79.134.250's password: woucaejiekutumno5@melinda:~$ mkdir /tmp/utu5utumno5@melinda:~$ cd /tmp/utu5utumno5@melind

root@today:~/Desktop/misc/utumno/utumno6# ssh utumno7@178.79.134.250utumno7@178.79.134.250's password: totiquegaeutumno7@melinda:~$ mkdir /tmp/utu7utumno7@melinda:~$ cd /tmp/utu7utumno7@melind

WeChall ScoreboardOverTheWire makes use of a scoreboard provided by WeChall to allowplayers to track their own progress and promote some healthy competitionbetween players. To make use of this sco

root@today:~/Desktop/misc/utumno/utumno6# ssh utumno6@178.79.134.250utumno6@178.79.134.250's password: eiluquiethutumno6@melinda:~$ mkdir /tmp/utu6utumno6@melinda:~$ cd /tmp/utu6utumno6@melind

#include #include int main(int argc, char *argv[]){ char fname[16]; /* $esp + 0x28 */ char chr; /* $esp + 0x24 */ FILE *fp; /* $esp + 0x20 */ pid_t pid; /* $esp + 0x1c */ pid = getpid(); s

#include int main(int argc, char *argv[]){ char buf[200]; printf("Identify yourself: "); fgets(buf, 200, stdin); printf("Welcome, "); printf(buf); puts("\naaaand goodbye again."); return

/** narnia1.c *//* This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundatio

/** narnia2.c *//* This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundatio

/** narnia3.c *//* This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundatio

/** narnia4.c *//* This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundatio

/** narnia5.c *//* This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundatio

/** narnia7.c *//* This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundatio

/** narnia8.c *//* This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundatio

/** narnia6.c *//* This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundatio

#include #include #include int main(int argc, char *argv[]){ char pw[64]; char key[] = {"OK^GSYBEX^Y"}; printf("PassWord: "); scanf("%64s", pw); memfrob(key, strlen(key)); if (strcmp(pw,

#include int main(int argc, char *argv[]){ char buf[64]; printf("Password: "); gets(buf); puts("Authentication failure.\nSorry."); return 0;}root@today:~# ssh behemoth1@178.79.1

#include #include #include int main(int argc, char *argv[]){ struct stat filestat; char cmd[16]; char *ptrpid = cmd + 6; pid_t pid; pid = getpid(); sprintf(cmd, "touch %d", pid); if (lst

root@today:~/Desktop/misc/utumno/utumno4# ssh utumno4@178.79.134.250utumno4@melinda:~$ cd /tmp/utu4utumno4@melinda:/tmp/utu4$ gdb -tui /utumno/utumno4(gdb) layout asm(gdb) b *main+108Breakpoint