Kuthetsa ntchitoyi ndi pwnable.kr 25 - otp. Malire a kukula kwa fayilo ya Linux

Kuthetsa ntchitoyi ndi pwnable.kr 25 - otp. Malire a kukula kwa fayilo ya Linux
Munkhaniyi tithana ndi ntchito ya 25 kuchokera patsamba pwnable.kr.

zambiri za bungweMakamaka kwa iwo amene akufuna kuphunzira china chatsopano ndikukula m'mbali zonse za chidziwitso ndi chitetezo cha makompyuta, ndilemba ndikulankhula za magulu awa:

  • PWN;
  • cryptography (Crypto);
  • ukadaulo wapaintaneti (Network);
  • reverse (Reverse Engineering);
  • steganography (steganography);
  • kusaka ndi kugwiritsa ntchito ziwopsezo za WEB.

Kuphatikiza apo, ndigawana zomwe ndakumana nazo pazambiri zamakompyuta, kusanthula kwa pulogalamu yaumbanda ndi firmware, kuwukira kwa ma netiweki opanda zingwe ndi ma network amderali, zoyeserera ndi kulemba.

Kuti mudziwe za nkhani zatsopano, mapulogalamu ndi zina, ndidalenga Telegalamu njira ΠΈ gulu kuti tikambirane nkhani iliyonse m'chigawo cha IIKB. Komanso zopempha zanu, mafunso, malingaliro ndi malingaliro anu Ndiyang'ana ndikuyankha aliyense..

Zambiri zimaperekedwa pazolinga zamaphunziro zokha. Mlembi wa chikalatachi alibe udindo uliwonse wa kuwonongeka kwa wina aliyense chifukwa chogwiritsa ntchito chidziwitso ndi njira zomwe adapeza chifukwa chophunzira chikalatachi.

Kuthetsa ntchito ya otp

Tikupitiriza ndi gawo lachiwiri. Ndidzanena nthawi yomweyo kuti ndizovuta kwambiri kuposa yoyamba, koma nthawi ino sapereka code source ya pulogalamuyi. Musaiwale zokambirana pano (https://t.me/RalfHackerPublicChat) ndipo apa (https://t.me/RalfHackerChannel). Tiyeni tiyambe.

Dinani pa chithunzi ndi siginecha otp. Timapatsidwa adilesi ndi doko kuti tilumikizidwe.

Kuthetsa ntchitoyi ndi pwnable.kr 25 - otp. Malire a kukula kwa fayilo ya Linux

Timagwirizanitsa ndi kuyang'ana pozungulira pa seva.

Kuthetsa ntchitoyi ndi pwnable.kr 25 - otp. Malire a kukula kwa fayilo ya Linux

Mbendera yomwe sitingawerenge ndi pulogalamuyo komanso gwero lake. Tiyeni tiwone gwero.

Kuthetsa ntchitoyi ndi pwnable.kr 25 - otp. Malire a kukula kwa fayilo ya Linux

Tiyeni tinyamule. Pulogalamuyi imatenga mawu achinsinsi ngati mkangano.

Kuthetsa ntchitoyi ndi pwnable.kr 25 - otp. Malire a kukula kwa fayilo ya Linux

Kuphatikiza apo, ma byte 16 mwachisawawa amasungidwa mu otp variable.

Kuthetsa ntchitoyi ndi pwnable.kr 25 - otp. Malire a kukula kwa fayilo ya Linux

Fayilo yokhala ndi dzina mwachisawawa imapangidwa mufoda ya tmp (zoyamba 8 byte ndi otp) ndipo ma byte 8 amalembedwa kwa iyo (8 byte yachiwiri ndi otp).

Kuthetsa ntchitoyi ndi pwnable.kr 25 - otp. Malire a kukula kwa fayilo ya Linux

Pazifukwa zina, mtengo wa fayilo yopangidwa umawerengedwa ndikufananizidwa ndi mawu achinsinsi omwe adalowetsedwa.

Kuthetsa ntchitoyi ndi pwnable.kr 25 - otp. Malire a kukula kwa fayilo ya Linux

Pali kusatetezeka pano. Zimaphatikizapo kusungidwa kwapakati kwa nambala yopangidwa ku fayilo. Titha kuchepetsa kukula kwa fayilo, mwachitsanzo, mpaka 0, ndiye polemba ndi kuwerenga, 0 idzafaniziridwa ndi mawu achinsinsi.Mutha kuchita motere.

# ulimit -f 0

Kuthetsa ntchitoyi ndi pwnable.kr 25 - otp. Malire a kukula kwa fayilo ya Linux

Tsopano tiyeni tiyendetse pulogalamuyi.

Kuthetsa ntchitoyi ndi pwnable.kr 25 - otp. Malire a kukula kwa fayilo ya Linux

Tikupeza cholakwika. Zilibe kanthu, zitha kukonzedwa pogwiritsa ntchito python yomweyo.

python -c "import os, signal; signal.signal(signal.SIGXFSZ, signal.SIG_IGN); os.system('./otp 0')" 

Kuthetsa ntchitoyi ndi pwnable.kr 25 - otp. Malire a kukula kwa fayilo ya Linux

Timapeza mbendera ndi mfundo zathu 100 zosavuta. Ndipo tikupitiriza: m'nkhani yotsatira tidzakhudza Webusaiti. Mutha kulowa nafe pa uthengawo.

Source: www.habr.com

Kuwonjezera ndemanga