ctf-writeups - CTF Writeups: Collection of CTF "technical" writeu

项目说明

Preparing the Docker Containers

In order to run the challenge POCs without any problem, I prepared docker containers for Ubuntu releases. The instructions for using the containers can be found here.

Writeups

| CTF | Challenge | Info | Exploitation | Links |
|:--------------------------:|:-----------:|--------------------|----------------------|:---------:|
| UTCTF 2019| babyecho | x86_32 NX Partial RELRO ASLR | GOT format string libc database | CTFtime Writeups Archives |
| BSidesSF 2019| slowfire | x86_64 Partial RELRO ASLR | GOT PLT shellcode socket stack o syscall | CTFtime Writeups Archives |
| TAMUctf 2019| pwn3 | x86_32 Full RELRO PIE ASLR | shellcode stack o syscall | CTFtime Writeups Archives |
| TAMUctf 2019| pwn5 | x86_32 NX Partial RELRO ASLR | ret2libc stack o | CTFtime Writeups Archives |
| ASIS 2018 Finals| asvdb | x86_64 NX Canary Full RELRO ASLR | __free_hook double free heap one gadget smallbin tcache dup tcache poisoning tcache unsorted bin use after free | CTFtime Writeups Archives |
| ASIS 2018 Finals| inception | x86_64 NX Partial RELRO ASLR | GOT ROP fork one gadget pipe return-to-csu stack o | CTFtime Writeups Archives |
| SECCON 2018 Quals| profile | x86_64 NX Canary Partial RELRO ASLR | C++ GOT arbitrary read buffer o one gadget string | CTFtime Writeups Archives |
| SECCON 2018 Quals| classic | x86_64 NX Partial RELRO ASLR | GOT ROP one gadget stack o stack pi | CTFtime Writeups Archives |
| BSidesDelhi 2018| data_bank | x86_64 NX Canary Full RELRO PIE ASLR | __malloc_hook heap one gadget tcache poisoning tcache use after free | CTFtime Writeups Archives |
| HITCON 2018| children_tcache | x86_64 NX Canary Full RELRO PIE ASLR | __malloc_hook double free heap off-by-one o chunks poison-null-byte tcache dup tcache poisoning tcache | CTFtime Writeups Archives |
| Hack.lu 2018| babyphp | Web PHP | assert code injection unintended behaviors unsanitized input | CTFtime Writeups Archives |
| InCTF 2018| warmup | arm arm32 armhf Partial RELRO ASLR | shellcode stack o syscall | CTFtime Writeups Archives |
| InCTF 2018| yawn | x86_64 NX Canary Full RELRO ASLR | GOT __malloc_hook fastbin dup heap off-by-one one gadget | CTFtime Writeups Archives |
| InCTF 2018| securepad | x86_64 NX Canary Full RELRO PIE ASLR | __free_hook arbitrary free fastbin dup heap uninitialized var unsorted bin | CTFtime Writeups Archives |
| CSAW 2018 Quals| alien_in | x86_64 NX Canary Partial RELRO PIE ASLR | GOT heap off-by-one o chunks poison-null-byte | CTFtime Writeups Archives |
| CSAW 2018 Quals| bigboy | x86_64 NX Canary Partial RELRO ASLR | stack o | CTFtime Writeups Archives |
| CSAW 2018 Quals| get_it | x86_64 NX Partial RELRO ASLR | stack o | CTFtime Writeups Archives |
| CSAW 2018 Quals| shell_code | x86_64 Full RELRO PIE ASLR | shellcode stack o | CTFtime Writeups Archives |
| WhiteHat 2018 Quals| pwn02 | x86_64 NX Canary Full RELRO FORTIFY ASLR | glibc tcache heap off-by-one o chunks poison-null-byte | CTFtime Writeups Archives |
| MeePwn 2018 Quals| babysandbox | x86_32 NX Partial RELRO PIE ASLR | openat readv shellcode socket syscall writev | CTFtime Writeups Archives |
| 0CTF 2018 Finals| freenote2018 | x86_64 NX Canary Full RELRO PIE ASLR | __malloc_hook double free fastbin dup heap metadata heap o chunks | CTFtime Writeups Archives |
| RCTF 2018| rnote3 | x86_64 NX Canary Full RELRO PIE ASLR | __free_hook fastbin heap one gadget o chunks uninitialized var | CTFtime Writeups Archives |
| RCTF 2018| babyheap | x86_64 NX Canary Full RELRO PIE ASLR | PRE bit __malloc_hook heap off-by-one poison-null-byte | CTFtime Writeups Archives |
| RCTF 2018| stringer | x86_64 NX Canary Full RELRO PIE ASLR | IS_MMAPED __malloc_hook calloc double free fastbin dup heap off-by-one | CTFtime Writeups Archives |
| PlaidCTF 2018| shop | x86_64 NX Canary Partial RELRO ASLR | GOT buffer o heap one gadget | CTFtime Writeups Archives |
| ASIS 2018 Quals| cat | x86_64 NX Canary Partial RELRO ASLR | GOT fastbin heap | CTFtime Writeups Archives |
| ASIS 2018 Quals| fifty_dollars | x86_64 NX Canary Full RELRO PIE ASLR | double free fastbin heap use after free | CTFtime Writeups Archives |
| ASIS 2018 Quals| just_sort | x86_64 NX Canary Partial RELRO ASLR | GOT heap o one gadget | CTFtime Writeups Archives |
| ASIS 2018 Quals| message_me | x86_64 NX Canary Partial RELRO ASLR | __malloc_hook double free fastbins heap o chunks use after free | CTFtime Writeups Archives |
| StarCTF 2018| babystack | x86_64 NX Canary Full RELRO ASLR | GOT pthread stack o stack_guard thread local storage | CTFtime Writeups Archives |
| StarCTF 2018| note | x86_64 NX Full RELRO ASLR | GOT LSB ROP off-by-one saved rbp stack o | CTFtime Writeups Archives |
| StarCTF 2018| warmup | x86_64 NX Full RELRO ASLR | GOT one gadget stack o | CTFtime Writeups Archives |
| WPICTF 2018| forker.level1 | x86_64 Partial RELRO ASLR | GOT ROP return-to-csu shellcode stack o | CTFtime Writeups Archives |
| WPICTF 2018| forker.level2 | x86_64 NX Canary Partial RELRO ASLR | fork socket stack canary stack cookie stack o | CTFtime Writeups Archives |
| UIUCTF 2018| how2heap | x86_64 NX Canary Full RELRO PIE ASLR | heap one gadget | CTFtime Writeups Archives |
| 0CTF 2018 Quals| babyheap | x86_64 NX Canary Full RELRO PIE ASLR | __malloc_hook double free fastbin dup heap off-by-one one gadget top chunk | CTFtime Writeups Archives |
| 0CTF 2018 Quals| babystack | x86_32 NX Partial RELRO ASLR | Elf_Rel Elf_Sym GOT PLT ROP dynstr dynsym rel_plt stack o | CTFtime Writeups Archives |
| iCTF 2018| fantasticiot | x86_32 NX Canary ASLR | attack & defense binary patching strncmp | CTFtime Writeups Archives |
| TAMUctf 2018| pwn5 | x86_32 NX Partial RELRO ASLR | ROP stack o syscall | CTFtime Writeups Archives |
| NullconHackIM 2018| pwn2-box | x86_64 Partial RELRO ASLR | ROP one gadget shellcode syscall | CTFtime Writeups Archives |
| Codegate 2018 Quals| baskin_robins31 | x86_64 NX Partial RELRO ASLR | GOT ROP one gadget stack o stack pivot | CTFtime Writeups Archives |
| Codegate 2018 Quals| super_marimo | x86_64 NX Canary Partial RELRO ASLR | GOT fastbin heap one gadget | CTFtime Writeups Archives |
| 0CTF 2017 Quals| babyheap | x86_64 NX Canary Full RELRO PIE ASLR | IS_MMAPED __malloc_hook calloc fastbin attack fastbin heap o one gadget smallbin | CTFtime Writeups Archives |
| C3CTF 2017| simplegc | x86_64 NX Canary Partial RELRO ASLR | GOT fastbin glibc tcache heap use after free | CTFtime Writeups Archives |
| SECCON 2017 Quals| election | x86_64 NX Canary Full RELRO ASLR | GOT __malloc_hook fastbin null byte o null byte poisoning off-by-one one gadget | CTFtime Writeups Archives |
| SECCON 2017 Quals| secure_keymanager | x86_64 NX Canary Partial RELRO ASLR | GOT PLT double free fastbin format string heap | CTFtime Writeups Archives |
| SECCON 2017 Quals| | x86_64 NX Canary Partial RELRO ASLR | GOT __malloc_hook fastbin heap one gadget o chunks use after free calls | CTFtime Writeups Archives |
| CSAW 2017 Quals| scv | x86_64 NX Canary Partial RELRO ASLR | ROP buffer o buffer o information disclosure one gadget stack o | CTFtime Writeups Archives |

项目信息

开发语言：C++

Star 数：231

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕CTF Writeups: Collection of CTF "technical" writeups by PersianCats.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。