'Devices using the Realtek AC600 & AC1200 chipsets, such as the Edimax EW-7811UTC and Edimax EW-7822UAC, require drivers that have not been merged with the linux kernel and do not come with most linux distros(yet). Follow this guide to install them yourself!' (cited from this blog) My
ctf
Write-up for cmd2 of pwnable (Ref) 0x00 Puzzle Daddy bought me a system command shell. but he put some filters to prevent me from playing with it without his permission... but I wanna play anytime I want! ssh cmd2@pwnable.kr -p2222 (pw:flag of cmd1) 0x01 Explore ssh $ pwd
ctf
0x00 Puzzle Mommy! what is PATH environment in Linux? ssh cmd1@pwnable.kr -p2222 (pw:guest) 0x01 Explore ssh cmd1@ubuntu:~$ ls -l total 20 -r-xr-sr-x 1 root cmd1_pwn 8513 Jul 14 2015 cmd1 -rw-r--r-- 1 root root 319 Jul 14 2015 cmd1.c -r--r----- 1 root cmd1_pwn
ctf
0x00 Puzzle Hey! check out this C implementation of blackjack game! I found it online * http://cboard.cprogramming.com/c-programming/114023-simple-blackjack-program.html I like to give my flags to millionares. how much money you got? Running at : nc pwnable.kr 9009 Source code - http://cboard.cprogramming.com/c-programming/114023-simple-blackjack-program.
ctf
Write-up for coin1 of pwnable.kr 0x00 Puzzle Mommy, I wanna play a game! (if your network response time is too slow, try nc 0 9007 inside pwnable.kr server) Running at : nc pwnable.kr 9007 0x01 Explore nc shellshock@ubuntu:~$ nc 0 9007 --------------------------------------------------- - Shall we play a
ctf
0x00 Puzzle Mommy, there was a shocking news about bash. I bet you already know, but lets just make it sure :) ssh shellshock@pwnable.kr -p2222 (pw:guest) 0x01 Explore **ssh** $ ssh shellshock@pwnable.kr -p2222 shellshock@ubuntu:~$ ls -l total 960 -r-xr-xr-x 1 root shellshock 959120 Oct 12 2014
ctf
Write-up for mistake of pwnable.kr. 0x00 Puzzle We all make mistakes, let's move on. (don't take this too seriously, no fancy hacking skill is required at all) This task is based on real event Thanks to dhmonkey hint : operator priority ssh mistake@pwnable.kr -p2222
ctf
Write-up for leg of pwnable.kr key points: * Return value of a function in assembling level is stored in $eax when it returns. * $eax, $ebx, $ecx, $edx are defined as r1, r2, r3, r4 in x86_64 Linux c code. 0x00 Puzzle Daddy told me I should study arm. But
ghost
Source: Prism Installation * Log into admin page of your ghost blog. * Click the Code Injection on the left. * Copy this line to Blog Header: <link href="https://cdnjs.cloudflare.com/ajax/libs/prism/0.0.1/prism.min.css" rel="stylesheet" /> * Copy this line
Write-up for input of pwnable.kr Write-up ref: this blog 0x00 Puzzle Mom? how can I pass my input to a computer program? ssh input2@pwnable.kr -p2222 (pw:guest) This is really a great puzzle to learn and practice Linux input programming skill. Covered 5 different possible types of
radare2
0x00 Debug mode (ref: Radare2 Book) We can use $ r2 -d <binary> to open r2 with debug mode. There are several commands in debug mode: > d? ; get help on debugger commands > ds 3 ; step 3 times > db 0x8048920 ; setup a breakpoint > db -0x8048920 ; remove
pwnable.kr
Write-up for random in pwnable.kr. 0x00 Puzzle Daddy, teach me how to use random value in programming! ssh random@pwnable.kr -p2222 (pw:guest) 0x01 Explore ssh into the Ubuntu and here we get: $ ssh random@pwnable.kr 2222 random@ubuntu:~$ ls -l total 20 -r--r----- 1 random_pwn