Ukusombulula umsebenzi nge pwnable.kr 25 - otp. Ubungakanani befayile yeLinux umda

Kweli nqaku siza kusombulula umsebenzi we-25 ukusuka kwindawo pwnable.kr.

Ulwazi lombuthoNgokukodwa kwabo bafuna ukufunda into entsha kwaye baphuhlise kuyo nayiphi na indawo yolwazi kunye nokhuseleko lwekhompyuter, ndiza kubhala kwaye ndithethe ngezi ndidi zilandelayo:

• PWN;
• i-cryptography (Crypto);
• iteknoloji yenethiwekhi (Network);
• umva (Reverse Engineering);
• i-steganography (i-Stegano);
• ukukhangela kunye nokuxhaphazwa kobuthathaka beWEB.

Ukongeza koku, ndiza kubelana ngamava am kwi-forensics yekhompyuter, i-malware kunye nohlalutyo lwe-firmware, ukuhlaselwa kwamanethiwekhi angenazingcingo kunye nothungelwano lwendawo yendawo, ukuqhuba iipentes kunye nokuxhaphaza ngokubhala.

Ukukunceda uhlale usexesheni ngamanqaku amatsha, isoftwe, kunye nolunye ulwazi, ndiyenzile itshaneli kwiTelegram и iqela lokuxoxa ngayo nayiphi na imiba kwindawo ye-I&KB. Kwakhona izicelo zakho zobuqu, imibuzo, iingcebiso kunye neengcebiso Ndiza kujonga kuyo kwaye ndiphendule kuye wonke umntu..

Lonke ulwazi lunikezelwe ngeenjongo zemfundo kuphela. Umbhali wolu xwebhu akalwamkeli naluphi na uxanduva lwawo nawuphi na umonakalo owenziwe nakubani na ngenxa yokusetyenziswa kolwazi kunye nobuchule obufunyenwe ngokufunda olu xwebhu.

Ukusombulula umsebenzi we-opp

Masiqhubeke necandelo lesibini. Ndiza kuthetha ngokukhawuleza ukuba kuyinkimbinkimbi kunokuqala, kodwa ngeli xesha ababoneleli ngekhowudi yomthombo weprogram. Ungalibali malunga nengxoxo apha (https://t.me/RalfHackerPublicChat) kwaye apha (https://t.me/RalfHackerChannel). Masiqale.

Cofa kwi icon ngotyikityo otp. Sinikwa idilesi kunye nezibuko ukuze siqhagamshele.

Sidibanisa kwaye sijonge ngeenxa zonke kumncedisi.

Iflegi esingakwaziyo ukuyifunda, inkqubo kunye nekhowudi yomthombo wayo. Makhe sijonge umthombo.

Masiyilungise. Inkqubo ithatha igama eliyimfihlo njengengxoxo.

Okulandelayo, i-16 bytes engaqhelekanga igcinwa kuguquko lwe-otp.

Ifayile enegama elingahleliwe lenziwe kwifolda ye-tmp (i-8 bytes yokuqala i-otp) kunye ne-8 bytes e-random ibhalwe kuyo (yesibini i-8 bytes i-otp).

Ngesizathu esithile, ixabiso lefayile eyenziweyo iyafundwa kwaye ithelekiswa negama lokugqitha elifakiweyo.

Apha kulapho ukuba sesichengeni kungena khona. Ibandakanya ukugcina ngokuphakathi inombolo eyenziweyo kwifayile. Sinokunciphisa ubungakanani befayile, umzekelo, ukuya ku-0, ngoko xa ubhala kwaye ufunda, u-0 uya kuthelekiswa negama eliyimfihlo. Oku kunokwenziwa ngolu hlobo.

# ulimit -f 0

Ngoku masiqhube inkqubo.

Sifumana impazamo. Ayinamsebenzi, inokucutshungulwa kusetyenziswa i-python efanayo.

python -c "import os, signal; signal.signal(signal.SIGXFSZ, signal.SIG_IGN); os.system('./otp 0')" 

Sifumana iflegi kunye namanqaku ethu alula ali-100. Kwaye siyaqhubeka: kwinqaku elilandelayo siza kuchukumisa kwiWebhu. Ungasijoyina ku yocingo.

umthombo: www.habr.com