Upgrade to Pro — share decks privately, control downloads, hide ads and more …

katagaitai CTF勉強会 #5 pwnables編 - PlaidCTF 2015 ...

bata_24
January 08, 2017
Technology
1
660

katagaitai CTF勉強会 #5 pwnables編 - PlaidCTF 2015 Pwnable620 tp / katagaitai CTF #5

katagaitai CTF勉強会 #5 関東|med, 関西|med で発表した資料です．
閲覧自由ですが，社会人の方はなるべくWikipediaなどお好きなサービスやOSSに￥1000の寄付をしてあげて下さい(←流行らせたい)．
stage1はUAFからのROP，stage2は許可されたシステムコールのみを使ったサンドボックス回避です．

bata_24

January 08, 2017
Tweet

More Decks by bata_24

See All by bata_24
katagaitai CTF勉強会 #11 Pwnable編 - PlaidCTF 2016 Pwnable666 js_sandbox / katagaitai CTF #11
bata_24
11
2.6k
katagaitai CTF勉強会 #9 Reversing編 - Hack.lu CTF 2012 Reversing 500 DonnBeach / katagaitai CTF #9
bata_24
8
4k
katagaitai CTF勉強会 #8 Pwnables編 - Hack.lu CTF 2013 Exploiting 500 Breznparadisebugmaschine / katagaitai CTF #8
bata_24
5
2.6k
katagaitai CTF勉強会 #1 pwnables編 - DEFCON CTF 2014 pwn1 heap / katagaitai CTF #1
bata_24
5
5.3k
katagaitai CTF勉強会 #2 pwnables編 - PlaidCTF 2013 pwn200 ropasaurusrex / katagaitai CTF #2
bata_24
4
5k
YOKARO-MON勉強会 - CodeGate 2015 Pwnable1000 weff / katagaitai CTF #2.5
bata_24
1
570
UAF勉強会 - CodeGate 2014 rev+pwn450 weird_snus / katagaitai CTF #2.75
bata_24
1
3.2k
katagaitai CTF勉強会 #3 pwnables編 - 31C3 CTF pwn30 nokia1337, pwn50 nokia31337 / katagaitai CTF #3
bata_24
2
2.2k
katagaitai CTF勉強会 #4 pwnables編 - CodeGate 2015 Pwnable400 beef_steak / katagaitai CTF #4
bata_24
1
1.9k

Other Decks in Technology

See All in Technology
GitHub Universe: Evaluating RAG apps in GitHub Actions
pamelafox
0
180
グローバル展開を見据えたサービスにおける機械翻訳プラクティス / dp-ai-translating
cyberagentdevelopers
PRO
1
150
新卒1年目が挑む！生成AI × マルチエージェントで実現する次世代オンボーディング / operation-ai-onboarding
cyberagentdevelopers
PRO
1
170
AWS CodePipelineでコンテナアプリをデプロイした際に、古いイメージを自動で削除する
smt7174
1
100
Aurora_BlueGreenDeploymentsやってみた
tsukasa_ishimaru
1
130
Amazon FSx for NetApp ONTAPを利用するにあたっての要件整理と設計のポイント
non97
1
160
大規模データ基盤チームのオンプレTiDB運用への挑戦 / dpu-tidb
cyberagentdevelopers
PRO
1
110
IaC運用を楽にするためにCDK Pipelinesを導入したけど、思い通りにいかなかった話
smt7174
1
110
Gradle: The Build System That Loves To Hate You
aurimas
2
150
ABEMA のコンテンツ制作を最適化！生成 AI x クラウド映像編集システム / abema-ai-editor
cyberagentdevelopers
PRO
1
180
急成長中のWINTICKETにおける品質と開発スピードと向き合ったQA戦略と今後の展望 / winticket-autify
cyberagentdevelopers
PRO
1
160
AWS re:Inventを徹底的に楽しむためのTips / Tips for thoroughly enjoying AWS re:Invent
yuj1osm
1
570

Featured

See All Featured
Building a Scalable Design System with Sketch
lauravandoore
459
33k
Optimising Largest Contentful Paint
csswizardry
33
2.9k
Stop Working from a Prison Cell
hatefulcrawdad
267
20k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
danielanewman
226
22k
Easily Structure & Communicate Ideas using Wireframe
afnizarnur
191
16k
Dealing with People You Can't Stand - Big Design 2015
cassininazir
364
22k
Raft: Consensus for Rubyists
vanstee
136
6.6k
Speed Design
sergeychernyshev
24
570
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
tammyeverts
46
2.1k
Helping Users Find Their Own Way: Creating Modern Search Experiences
danielanewman
29
2.2k
Reflections from 52 weeks, 52 projects
jeffersonlam
346
20k
Navigating Team Friction
lara
183
14k

Transcript

  1. None
  2. None
  3. None
  4. None
  5. None
  6. None
  7. None
  8. None
  9. None
  10. None
  11. None
  12. None
  13. None
  14. None
  15. None
  16. None
  17. None
  18. None
  19. None
  20. None
  21. None
  22. None
  23. None
  24. None
  25. None
  26. None
  27. None
  28. None
  29. None
  30. None
  31. None
  32. None
  33. None
  34. None
  35. None
  36. None
  37. None
  38. None
  39. None
  40. None
  41. None
  42. None
  43. None
  44. None
  45. None
  46. None
  47. None
  48. None
  49. None
  50. None
  51. None
  52. None
  53. None
  54. None
  55. None
  56. None
  57. None
  58. None
  59. None
  60. None
  61. None
  62. None
  63. None
  64. None
  65. None
  66. None
  67. None
  68. None
  69. None
  70. None
  71. None
  72. None
  73. None
  74. None
  75. None
  76. None
  77. None
  78. None
  79. None
  80. None
  81. None
  82. None
  83. None
  84. None
  85. None
  86. None
  87. None
  88. None
  89. None
  90. None
  91. None
  92. None
  93. None
  94. None
  95. None
  96. None
  97. None
  98. None
  99. None
  100. None
  101. None
  102. None
  103. None
  104. None
  105. None
  106. None
  107. None
  108. None
  109. None
  110. None
  111. None
  112. None
  113. None
  114. None
  115. None
  116. None
  117. None
  118. None
  119. None
  120. None
  121. None
  122. None
  123. None
  124. None
  125. None
  126. None
  127. None
  128. None
  129. None
  130. None
  131. None
  132. None
  133. None
  134. None
  135. None
  136. None
  137. None
  138. None
  139. None
  140. None
  141. None
  142. None
  143. None
  144. None
  145. None
  146. None
  147. None
  148. None
  149. None
  150. None
  151. None
  152. None
  153. None
  154. None
  155. None
  156. None
  157. None
  158. None
  159. None
  160. None
  161. None
  162. None
  163. None
  164. None
  165. None
  166. None
  167. None
  168. None
  169. None
  170. None
  171. None
  172. None
  173. None
  174. None
  175. None
  176. None
  177. None
  178. None
  179. None
  180. None
  181. None
  182. None
  183. None
  184. None
  185. None
  186. None
  187. None
  188. None
  189. None
  190. None
  191. None
  192. None
  193. None
  194. None
  195. None
  196. None
  197. None
  198. None
  199. None
  200. None
  201. None
  202. None
  203. None
  204. None
  205. None
  206. None
  207. None
  208. None
  209. None
  210. None
  211. None
  212. None
  213. None
  214. None
  215. None
  216. None
  217. None
  218. None
  219. None
  220. None
  221. None
  222. None
  223. None
  224. None
  225. None
  226. None
  227. None
  228. None
  229. None
  230. None
  231. None
  232. None
  233. None
  234. None
  235. None
  236. None
  237. None
  238. None
  239. None
  240. None
  241. None
  242. None
  243. None
  244. None
  245. None
  246. None
  247. None
  248. None
  249. None
  250. None
  251. None
  252. None
  253. None
  254. None
  255. None
  256. None
  257. None
  258. None
  259. None
  260. None
  261. None
  262. None
  263. None
  264. None
  265. None
  266. None
  267. None
  268. None
  269. None
  270. None
  271. None
  272. None
  273. None
  274. None
  275. None
  276. None
  277. None
  278. None
  279. None
  280. None
  281. None
  282. None
  283. None
  284. None
  285. None
  286. None
  287. None
  288. None
  289. None
  290. None
  291. None
  292. None
  293. None
  294. None
  295. None
  296. None
  297. None
  298. None
  299. None
  300. None
  301. None
  302. None
  303. None
  304. None
  305. None
  306. None
  307. None
  308. None
  309. None
  310. None
  311. None
  312. None
  313. None
  314. None
  315. None
  316. None
  317. None
  318. None
  319. None
  320. None
  321. None
  322. None
  323. None
  324. None
  325. None
  326. None
  327. None
  328. None
  329. None
  330. None
  331. None
  332. None
  333. None
  334. None
  335. None
  336. None
  337. None
  338. None
  339. None
  340. None
  341. None
  342. None
  343. None
  344. None
  345. None
  346. None
  347. None
  348. None
  349. None
  350. None
  351. None
  352. None
  353. None
  354. None
  355. None
  356. None
  357. None
  358. None
  359. None
  360. None
  361. None
  362. None
  363. None
  364. None
  365. None
  366. None
  367. None
  368. None
  369. None
  370. None
  371. None
  372. None
  373. None
  374. None
  375. None
  376. None
  377. None
  378. None