#buuctf
[Black Watch 入群题]PWN
vul_function()：
ssize_t vul_function()
{
size_t v0; // eax
size_t v1; //
...
[BUUCTF]ez_pz_hackover_2016
checksec：
Arch: i386-32-little
RELRO: Full RELRO
Stack:
...
[BJDCTF2020]babystack2
main函数如下：
int __cdecl main(int argc, const char **argv, const char **envp)
{
...
[HarekazeCTF2019]baby_rop2
ret2libc。
...
[BUUCTF]get_started_3dsctf_2016
0x00 方法一
静态编译，32位，想到通过系统调用来获取shell。
首先使用cyclic工具计算出了偏移量为56。
...
[BSidesCF 2020]Hurdles
首页提示：
You’ll be rewarded with a flag if you can make it over some /hurdles.
...
[WMCTF2020]Make PHP Great Again
<?php
highlight_file(__FILE__);
require_once ‘flag.php’;
if(isset($_GET[‘fil
...
