题目地址:http://pwnable.kr/play.php
题目地址页面,看看还是挺有意思的,还有一些图片。

看看题目:

题目比较简单,直接把解题过程列出来
root@mypwn:/ctf/work/reverse# ssh fd@pwnable.kr -p2222
The authenticity of host '[pwnable.kr]:2222 ([128.61.240.205]:2222)' can't be established.
ECDSA key fingerprint is SHA256:I9nWMZvctQv4Vypnh9ICs6aB2g20WV/EjTIYJ83P0K8.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[pwnable.kr]:2222,[128.61.240.205]:2222' (ECDSA) to the list of known hosts.
fd@pwnable.kr's password:
Permission denied, please try again.
fd@pwnable.kr's password:
____ __ __ ____ ____ ____ _ ___ __ _ ____
|

本文详细解析了Pwnable.kr平台上的一个CTF题目,通过SSH登录远程服务器,分析了目录下的文件权限和内容,重点解读了fd.c源代码,揭示了利用Linux文件描述符进行读取操作的技巧。

1019

被折叠的 条评论
为什么被折叠?



