-
Java_Sec Learn
https://drun1baby.tophttps://www.bilibili.com/video/BV16h411z7o9?spm_id_from=333.788.player.switch&vd_source=d51dbb41ef00391c5c021ee533eafd8e&p=2https://github.com/Drun1baby/JavaSecurityLea... -
Java_SSM Learn
SpringSpring 是一个框架 Spring 注解开发 SpringConfig.java 【代替原先 XML】 1234@Configuration @ComponentScan("com.xekoner") public class SpringConfig { } @Configuration 注解用于设定当前类为配置类@Compon... -
CTFShow_pwnX_wp
pwn37ret2text 32bit 123456789101112131415from pwn import *context(log_level='debug',arch='i386', os='linux')pwnfile= './pwn'# io = process(pwnfile)io = rem... -
CTFshow_pwn142_堆块重叠_wp
pwn142堆块重叠off-by-one 漏洞伪造 chunk header size 大小, free后再次malloc相同内存地址的chunk, UAF漏洞导致可以任意执行chunk content中的指令;输出free@got address , 计算base_addr 以及 system_addr , edit_heap函数体功能修改指针指向的内存地址数据(free@got) 为 s... -
ez_pz_hackover_2016_wp
buuctf pwn 板块下的 ez_pz_hackover_2016 12345678910❯ checksec ./ez_pz_hackover_2016[*] '/mnt/hgfs/0x9C_CTF_And_Study_Note/Pwn_Study/pwn_exercise/BUUCTF/ez_pz_hackover_2016' Arch: i38... -
ciscn_2019_s_3_ret2csu/SROP
1234567[*] '/mnt/hgfs/0x9C_CTF_And_Studay_Note/Pwn_Study/pwn_exercise/BUUCTF/ciscn_s_3' Arch: amd64-64-little RELRO: Partial RELRO Stack: No canary found NX: ... -
buuctf_pwn_picoctf-2018-rop-chain_writeup
i386 小端序程序， IDA32打开 main 12345678910int __cdecl main(int argc, const char **argv, const char **envp){ int v4; // [esp+Ch] [ebp-Ch] setvbuf(_bss_start, 0, 2, 0); v4 = getegid(); setresgid... -
ciscn-2019-es-2_writeup_栈迁移
借鉴于大佬写的一篇非常详细的文章 ： https://bbs.kanxue.com/thread-266927.htmchecksec 1234567[*] '/mnt/hgfs/0x9C_CTF_And_Study_Note/Pwn_Study/pwn_exercise/BUUCTF/ciscn_2019_es_2' Arch: i386-32-lit... -
GUET-CTF2019_Reverse_number-game_writeup
64bit 文件，无壳 IDA64 打开:12345678910111213141516171819202122232425262728293031323334353637unsigned __int64 __fastcall main(int a1, char **a2, char **a3){ __int64 v4; // [rsp+8h] [rbp-38h] __int6... -
buuctf_pwn_jarvisoj-fm_writeup
buuctf pwn 板块 jarvisoj_fm 题目，考察 x86 栈上格式化字符串漏洞 checksec 1234567[*] '/mnt/hgfs/CTF/Pwn_Study/pwn_exercise/BUUCTF/fm' Arch: i386-32-little RELRO: Partial RELRO Stack: ...
