starctf oob 现在根本不知道v8是怎么调试的,先通过知道创宇的starctf oob入门一下 环境搭建原文作者选择在win上用WSL编译,笔者因为电脑比较得劲就开个ubuntu编译 分配了12G内存、16核,time autoninja看了一下大概9min就好了 这里得先装一个git 然后装depot_tools 12345cd ~git clone https://chromium.googlesource. 2026-09-17 V8 #V8 #starctf oob
ustc_编译原理 编译器流程前端理解程序,后端生成机器码 ppt里面的流程长这样 123456789101112131415161718192021222324252627282930313233源代码↓ 词法分析Token流↓ 语法分析AST语法树↓ 语义分析合法AST↓ IR生成中间代码↓ 优化优化后的IR↓ 代码生成汇编↓ 汇编器.o↓ 链接器ELF 详细流程 1+2+3源语言只支持: 12整数 n加法 2026-08-12 编译原理 #Pwn #编译原理
C++笔记(SGI STL) starthttps://www.youtube.com/watch?v=18c3MTX0PK0&list=PLlrATfBNZ98dudnM48yfGUldqGD0S4FFb 找到了一位大佬的教学视频 面向对象编程是何意位?面向对象编程,英文叫 OOP:Object-Oriented Programming 把程序里的东西看成一个个对象,每个对象有自己的数据和行为 好比是人的‘硬件’ 2026-07-17 c++ #c++ #SGI STL
how2heap分析-_2.23 how2heap 用how2heap辅助一下 按说明书操作就对了 源码加载进去 directory /home/shark/Desktop/ctf/claude_code/how2heap/glibc_2.23/malloc start add-symbol-file /home/sh 2026-05-24 how2heap分析 #Pwn #glibc_2.23 #how2heap
SUCTF 2026 SU_evbuffer 服务器??? 开了8888和8889两个监听端口 socket(2->ipv4,2->UDP,0) UDP监听,8889 TCP监听,8888 tcp由于稳定大多用于核心业务,udp则是发个小数据包看看服务器在不在之类的 总之udp要的是快,tcp要稳(我在说什么废话) 无论数据从哪个端口进入,最终都会汇聚到 sub_13A4 函数进行处理 2026-04-23 SUCTF Writeup #Pwn
pwn.college-start&intro to cybersecurty Welcome to backStart Herestart from The Challenge Environment Challenge Programs 12345678910111213141516171819202122232425hacker@welcome~challenge-programs:~$ lsDesktop test test.chacker@welcome~cha 2026-04-23 pwn.college #Pwn #start #intro
pwn.college-pro sec-_Return Oriented Programming Welcome to backReturn Oriented ProgrammingCalling FunctionsLoose Link (Easy) 123456789In [8]: from pwn import * ...: p = process('/challenge/loose-link-easy') ...: offset = 56 ...: wi 2026-04-23 pwn.college #Pwn #rop
pwn.college-pro sec-_Program Security Welcome to backProgram SecurityProgram SecurityShellcoding challengesello ackers! shellcode must be have no ‘H’ xor? ummm,no we can use 32-bits shellcode which without 0x48,ok,we can’t “mov rsi,rsp “ 2026-04-23 pwn.college #Pwn
pwn.college-pro sec-_Program Explotation Welcome to backProgram ExploitationChallengesContainment Composition (Easy) No win function stack overflow??? maybe orw a seccomp filter! wc If rbp-0x28 is 0x725271a4bd26531a The seccomp wi 2026-04-23 pwn.college #Pwn
pwn.college-pro sec-_Dynamic Allocator Misuse Welcome to backDynamic Allocator MisuseUse After FreeFreebie (Easy)all right read_flag=malloc(292) flag will be read in flag_buffer bin #17=281 - 296 we can malloc 293 and free the *ptr 2026-04-23 pwn.college #heap