CTF-Workshop - Challenges for Binary Exploitation Workshop

项目说明

![hackucf logo]()

Read the full introduction at Hack My World

Requirements:
Linux, gcc, socat, and gcc-multilib to run and create 32 bit executables.

To get gcc-multilib on Ubuntu, you may run:

sudo apt-get install gcc-multilib

Otherwise you will have to Google for the installation instructions specific to your distro.

##Setup:

git clone ~/Workshops

Welcome!

This is a guide that was written with intention of taking you through the process of learning how to play Capture the Flag (CTF). This is by no means intended to be a comprehensi. Our intention here is simply to provide you with the tools you need to become familiar with the game and get started on your quest to become a leet hacker.

Prerequisites

This guide assumes that you have a working knowledge of the C programming language. We do not expect you to be an enterprise le; however, we will assume a working knowledge of functions, , pointers, etc. A basic understanding of Python is also highly recommended. While we will be going over the aspects of Python scripting that are most important to CTFs, reading through a few tutorials will be extremely helpful. If you ha programmed before, or do not feel you are comfortable with these concepts, the great interwebs is full of comprehensive tutorials and guides. A computer capable of handling a Linux machine is also required.

What is Capture the Flag?

CTFs are competitions in which players are gi related to several fields of cyber security. Challenges usually fall into one of the following categories:

* Reverse Engineering
* Binary Exploitation
* Web
* Cryptography
* Forensics

Normally, players will specialize in one of these categories. Although it is possible to have a basic knowledge of all of them, we suggest you begin by focusing on the one that interests you most. This guide will be focusing On Binary Exploitation.

Getting Started

Get yo-self some Linux

Pretty much any CTF worth it's salt is going to require a working knowledge of Linux. Binary exploitation challenges in particular are almost exclusively limited to the Linux en. What is Linux you ask? Well, it's an operating System. However, unlike Windows or the Apple OS, Linux is open source, so it's completely free! Also, because Linux is open source, de have the opportunity to create styles or flavors of Linux. These styles of Linux are referred to as Distributions. We recommend getting Ubuntu, as it is the most popular and beginner friendly distro.

When it comes to getting Linux, you basically you have four options:
<pre>
1) Wipe your current OS and replace it with Linux,
2) Dual boot your Current OS with Linux,
3) Boot Linux off of a USB drive, or
4) Get a machine.
</pre>

We suggest getting a machine. Learning your way around the Linux en can be a daunting task if you are new to computers or are not familiar with using a terminal, so having a disposable system on which you can practice and experiment is incredibly ad.

Setting up your machine

In theory, setting up an Ubuntu machine should be relatively easy; however, you may encounter one of several bugs or errors due to no fault of your own. Because every situation is different, we will not be able to enumerate every possible challenge you may come across while setting up your VM. As with e else in Computer Science, Google is your best friend. Make sure to read all errors carefully and to search for any error codes.

The first thing you need to do is download some software. The next thing you will need is a .iso file. Once you ha acquired both of those things, you can follow one of several tutorials to get your VM up and running.

#### Enabling
Due to the infinite wisdom of many hardware manufacturers these days, you may need to enable on your motherboard.
here is a tutorial on how to do that.

#### Guest Additions

If you successfully get your machine up and running, you may notice that you can not maximize the screen. This is because you need to install the guest additions. If you can successfully do this, you should a very nice desktop en to work with.

Learning Linux Commands

Learning the Linux command line is absolutely vital to cyber security of any kind. Pretty much every executable in a CTF will be run via the command line, and most tools a for CTFs are command line based. Plus, you can make the text green and look just like those super leet hackers you see in the movies all the time. If you haven't used a terminal before, we would highly recommend spending some time learning your way around the Linux en. In particular, opening and editing files, running executables, and using git will be essential for the remainder of this guide.

###Level 1: re

###Level 2: scripting

###Level 3: Exploitation

##More Resources:

Smash the Stack

Owen Redwood Lectures

Really good Youtube series

shamelss self promotion

项目信息

开发语言：C

Star 数：648

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Challenges for Binary Exploitation Workshop展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。