Ph4nt0m
← Voltar para Writeups
wargamepwnEasy

Mad Hong — 1Day 1Pwn Project

김동희·홍승표·김원겸의 1D1P(1Day 1Pwn) 프로젝트 — 매일 한 문제씩 풀고 writeup 작성

pwnwriteupproject1d1p

프로젝트 수행 계획서

제목

  • 1day 1Pwn + CodeQL

목적 (기대효과)

  • 1D1P로 기초 스킬과 꾸준함을 증명
  • 이후 CTF를 통해 꾸준히 목적 달성

수행자

  • 김동희, 홍승표, 김원겸

기간

  • 2020.12.28 ~ 2021.01.31

수행방안

  1. 매일 1day writeup 작성(간단한 exploit code라도)

특이사항

  1. 정기적인 프로젝트 일정을 정할 필요가 있음
  2. 꾸준함이필요함
  3. 어려운 문제를 풀더라도 다른 쉬운문제를 풀어 1D1P 작성

참고자료

Wargame Site

Reference

Pwnable To Do by malhyuk

Pwnable To Do

Binary Download

Baby

Difficulty : Baby

  • [TWMMA CTF 2016] Pwn greeting - Format String

  • [DEFCON CTF 2016] xkcd - Baby's First

  • [DEFCON CTF 2015] r0pbaby - 64 bit ROP

  • [DEFCON CTF 2015] babyecho - 32 bit Format String Bug

  • [CSAW CTF 2014] Exploitation400 - greenhornd

  • [CSAW CTF 2013] Exploitation2 - 200 Points - recv overflow include canary

  • [CSAW CTF 2013] Exploitation3 - 300 Points - recv overflow ROP

  • [CSAW CTF 2013] Exploitation4 - 400 Points - just overflow

  • [ebCTF 2013] pwn200

  • [CodeGate 2013] Vuln100 - No Stack Leak

  • [CodeGate 2013] Vuln200

  • [CodeGate 2013] Vuln300

  • [Gits CTF 2013] Q5 - FunnyBusiness

  • [Gits CTF 2013] Q8 - Shiftd

  • [ksnctf] #04 Villager A - 32bit format string

  • [CSAW CTF 2012] 4842 - 200 Points - information leak

  • [CSAW CTF 2012] 23456 - 400 Points

  • [CSAW CTF 2012] 12345 - 500 Points

Easy

Difficulty : Easy

  • [HITCON CTF 2016] Pwn 200 ShellingFolder

  • [TWMMA CTF 2016] Pwn Interpreter

  • [DEFCON CTF 2016] banker - Pwnable

  • [DEFCON CTF 2016] heapfun4u - Baby's First

  • [DEFCON CTF 2016] feedme - Baby's First

  • [CodeGate 2016] Pwnable490 OldSchool

  • [CodeGate 2016] Pwnable315 FlOppy

  • [CodeGate 2016] Pwnable444 Serial

  • [BkP CTF 2016] #2 Simple Calc - pwn5

  • [BkP CTF 2016] #13 complex calc - pwn5

  • [32c3 CTF 2015] pwn200 - readme

  • [DEFCON CTF 2015] wibbly wobbly timey wimey - Pwnable 2

  • [31c3 CTF 2014] pwn10 - cfy

  • [ED-CTF] my_sandbox

  • [DEFCON CTF 2014] Baby's First: 1 - heap

  • [PlaidCTF 2014] ezhp - Pwnables200

  • [PlaidCTF 2014] sass - Pwnables200

  • [CodeGate-2014] Angry Doraemon pwn250

  • [SIGINT CTF 2013] pwning 100 - baremetal

  • [PlaidCTF 2013] Pwn ropasaurusrex - 200

  • [UFOCTF 2013] Pwn100 - ufobay

  • [CodeGate 2013] Vuln400

  • [CodeGate 2013] Vuln500

  • [Gits CTF 2013] Q10 - Back2Skool

  • [ksnctf] #23 Villager B

  • [29c3 CTF 2012] Exploitation - ru1337

  • [29c3 CTF 2012] Exploitation - update_server

  • [PHDays CTF 2012] #07 PWN200

  • [PoliCTF 2012] Bin-Pwn 300

Medium easy

Difficulty : Medium easy

  • [HITCON CTF 2016] Pwn 300 Babyheap

  • [TWMMA CTF 2016] Pwn diary

  • [TWMMA CTF 2016] Pwn shadow

  • [DEFCON CTF 2016] pillpusher - Pwnable

  • [DEFCON CTF 2016] crunchtime - There I Fixed It

  • [DEFCON CTF 2016] int3rupt - There I Fixed It

  • [MMA CTF 1st 2015] spell

  • [MMA CTF 1st 2015] spell

  • [BkP CTF 2015] JFK/Umass pwn300

  • [31c3 CTF 2014] pwn30 - mynx

  • [31c3 CTF 2014] pwn40 - maze

  • [Pwnable.kr] [Hacker's Secret] unexploitable

  • [hack.lu2014] #07 Holy Moses - Exploiting300

  • [hack.lu2014] #14 The Union - Exploiting200

  • [PlaidCTF 2014] kappa - Pwnables275

  • [Gits CTF 2014] Q10 - TI-1337

  • [Gits CTF 2014] Q12 - Fuzzy

  • [30c3 CTF 2013] PWN 400 - DOGE2

  • [30c3 CTF 2013] PWN 350 - cwitscher

  • [ebCTF 2013] pwn300

  • [UFOCTF 2013] Pwn300 - doomsday

  • [UFOCTF 2013] Pwn400 - psychotherapy

  • [DEFCON CTF 2013] Exploitation3 - ergab

  • [DEFCON CTF 2013] Exploitation4 - annyong

  • [hack.lu2012] #09 Braincpy - 300

  • [hack.lu2012] #21 Get the Tank - 400

Medium medium

Difficulty : Medium

  • [HITCON CTF 2016] Pwn 100 Secret Holder

  • [HITCON CTF 2016] Pwn 300 Sleepy Holder

  • [DEFCON CTF 2016] kiss - Pwnable

  • [BkP CTF 2016] #1 Cookbook - pwn6

  • [BkP CTF 2016] #5 segsh - pwn6

  • [32c3 CTF 2015] pwn400 - ranger

  • [HITCON CTF 2015] Pwn 300 - readable

  • [MMA CTF 1st 2015] d3flate

  • [DEFCON CTF 2015] fuckup - Pwnable 3

  • [DEFCON CTF 2015] heapsoffun - Pwnable 4

  • [DEFCON CTF 2015] int3rupted - Pwnable 5

  • [CodeGate 2015] Pwnable400 beef_steak

  • [CodeGate 2015] Pwnable1000 sokoban

  • [CodeGate 2015] Pwnable1000 icbm

  • [Gits CTF 2015] Teaser Round #1 - Citadel

  • [31c3 CTF 2014] pwn20 - sarge

  • [31c3 CTF 2014] pwn30 - pong

  • [Pwnable.kr] [Hacker's Secret] tiny

  • [Pwnable.kr] [Grotesque] dos4fun

  • [BkP CTF 2014] Snapstagram(TM) pwn350

  • [PlaidCTF 2014] jackshit - Pwnables200

  • [PlaidCTF 2014] harry_potter - Pwnables300

  • [CodeGate-2014] 4stone pwn300

  • [Gits CTF 2014] Teaser Round #2 - Plaid Parliament of Codegate

  • [30c3 CTF 2013] PWN 400 - bittorrent

  • [30c3 CTF 2013] PWN 400 - bigdata

  • [ebCTF 2013] pwn400

  • [SIGINT CTF 2013] pwning 400 - crash

  • [DEFCON CTF 2013] Exploitation1 - bitterswallow

  • [SECUINSIDE 2013] movie_talk - 550

  • [Gits CTF 2013] Q18 - Crunch Time

  • [Gits CTF 2013] Teaser Round #1 - Choose your Pwn Adventure

  • [29c3 CTF 2012] Exploitation - proxy

  • [PHDays CTF 2012] #10 PWN500

Medium hard

Difficulty : Medium hard

  • [HITCON CTF 2016] Pwn 350 OmegaGo

  • [HITCON CTF 2016] Pwn 400 Heart Attack

  • [TWMMA CTF 2016] Web/Pwn/For Hastur

  • [DEFCON CTF 2016] justintime - Pwnable

  • [DEFCON CTF 2016] glados - Pwnable

  • [DEFCON CTF 2016] badger - There I Fixed It

  • [BCTF 2016] pwn400 - knurd

  • [BkP CTF 2016] #11 spacerex - pwn8

  • [32c3 CTF 2015] pwn500 - bingo

  • [32c3 CTF 2015] pwn300 - sandbox

  • [HITCON CTF 2015] Pwn 200 - blinkroot

  • [Trend Micro CTF 2015] secure_mm - analysis offensive 500

  • [DEFCON CTF 2015] tensixtyseven - Pwnable 4

  • [DEFCON CTF 2015] thing2 - Pwnable 4

  • [DEFCON CTF 2015] hackercalc - Pwnable 5

  • [CodeGate 2015] Pwnable800 Olive and Mushroom Pizza

  • [CodeGate 2015] Pwnable800 Rodent

  • [Gits CTF 2015] Q11 - boxxy

  • [31c3 CTF 2014] pwn30 - Nokia 1337

  • [31c3 CTF 2014] pwn35 - booking

  • [9447 CTF 2014] pwn420 - classy

  • [ED-CTF] local_only_64

  • [ED-CTF] local_only_32

  • [ED-CTF] Heap is a tomodachi of mine

  • [ED-CTF] Under Debugging

  • [Pwnable.kr] [Hacker's Secret] softmmu

  • [DEFCON CTF 2014 Final] justify

  • [SECUINSIDE CTF 2014 Final] pwn300 - notes

  • [SECUINSIDE CTF 2014 Final] pwn300 - numbers

  • [DEFCON CTF 2014] Selir: 3 - turdedo

  • [CodeGate-2014] minibomb pwn400

  • [CodeGate-2014] dodosandbox pwn600

  • [CodeGate-2014] Korean Restaurant pwn700

  • [Olympic CTF Sochi 2014] zpwn

  • [30c3 CTF 2013] PWN 300 - todos

  • [SECUINSIDE 2013] xml2html - 400

  • [SECUINSIDE 2013] pwn me!! - 750

  • [SECUINSIDE 2013] zombiemanager - 750

  • [SECUINSIDE 2013] angry danbi - 900

  • [29c3 CTF 2012] Exploitation - memcached

Hard

Difficulty : Hard

  • [HITCON CTF 2016] Pwn 500 House of Orange

  • [DEFCON CTF 2016] easier - Pwnable

  • [PlaidCTF 2016] awkward - Pwnables600

  • [HITCON CTF 2015] Pwn 500 - deathweed

  • [PlaidCTF 2015] qttpd - Pwnables950 //no binary

  • [PlaidCTF 2015] PlaidDB - Pwnables550

  • [PlaidCTF 2015] tp - Pwnables620

  • [CodeGate 2015] Pwnable1000 oemu

  • [CodeGate 2015] Pwnable1000 weff

  • [Gits CTF 2015] Q13 - gitschat

  • [31c3 CTF 2014] pwn50 - Nokia 31337

  • [31c3 CTF 2014] pwn30 - cfy2

  • [31c3 CTF 2014] pwn50 - saas

  • [hack.lu2014] #03 OREO - Exploiting400

  • [hack.lu2014] #05 breakout - Exploiting500

  • [hack.lu2014] #15 Mario - Exploiting500

  • [HITCON CTF 2014] Pwnables 550 - stkof

  • [DEFCON CTF 2014 Final] wdub2

  • [Pwnable.kr] [Hacker's Secret] xml

  • [Pwnable.kr] [Hacker's Secret] towelroot

  • [DEFCON CTF 2014] Lightning: 5 - dosfun4u

  • [CodeGate-2014] membership pwn800

  • [Olympic CTF Sochi 2014] 20Lines

  • [Gits CTF 2014] Q13 - Byte Sexual

  • [hack.lu2013] #16 Breznparadisebugmaschine - 500

  • [DEFCON CTF 2013] Exploitation5 - yolo

  • [PlaidCTF 2013] Pwn e1000 - 250

  • [PlaidCTF 2013] Web servr - 400

  • [hack.lu2012] #06 Braingathering - 500