독학두비니

War Games/pwnable.kr

[pwnable.kr] leg(2 pts) :: Write-Up

Daddy told me I should study arm. But I prefer to study my leg! Download : http://pwnable.kr/bin/leg.c Download : http://pwnable.kr/bin/leg.asm ssh leg@pwnable.kr -p2222 (pw:guest) 우선 c코드를 봅시다. #include #include int key1(){ asm("mov r3, pc\n"); } int key2(){ asm( "push{r6}\n" "addr6, pc, $1\n" "bxr6\n" ".code 16\n" "movr3, pc\n" "addr3, $0x4\n" "push{r3}\n" "pop{pc}\n" ".code32\n" "pop{r6}\n" );..

War Games/pwnable.kr

[pwnable.kr] collision(3 pts) :: Write-Up

Daddy told me about cool MD5 hash collision today. I wanna do something like that too! ssh col@pwnable.kr -p2222 (pw:guest) col@prowl:~$ ls col col.c flag col@prowl:~$ nl col.c 1#include 2#include 3unsigned long hashcode = 0x21DD09EC; 4unsigned long check_password(const char* p){ 5int* ip = (int*)p; 6int i; 7int res=0; 8for(i=0; i

War Games/pwnable.kr

[pwnable.kr] fd(1 pt) :: Write-Up

Mommy! what is a file descriptor in Linux? - try to play the wargame your self but if you are ABSOLUTE beginner, follow this tutorial link: https://youtu.be/971eZhMHQQw ssh fd@pwnable.kr -p2222 (pw:guest) fd@prowl:~$ ls fd fd.c flag fd@prowl:~$ cat flag cat: flag: Permission denied fd, fd.c, flag파일이 있네요. 보아하니 flag파일이 있는데 당연히도 권한이 없구요. 그래서 fd.c파일을 열어보았습니다. fd@prowl:~$ nl fd.c 1 #include 2 #includ..