Skip to content
This repository has been archived by the owner on May 21, 2024. It is now read-only.

Commit

Permalink
Merge pull request #3 from Arcovegle/master
Browse files Browse the repository at this point in the history
[update] Add reverse lab1 attachments
  • Loading branch information
f0rm2l1n authored Jul 9, 2023
2 parents 4c0ec7d + c706fbf commit af20b98
Show file tree
Hide file tree
Showing 8 changed files with 44 additions and 6 deletions.
2 changes: 1 addition & 1 deletion docs/intro/misc-lab1.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# misc 基础 Lab 1:编解码及 OSINT
# Misc Lab 1:编解码及 OSINT

本节 Lab 由以下两部分组成:

Expand Down
2 changes: 1 addition & 1 deletion docs/intro/pwn-lab1.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# pwn lab 1: 认识 PWN 题: Code Injection
# Pwn Lab 1: Code Injection

本节 Lab 由以下两部分组成:

Expand Down
38 changes: 38 additions & 0 deletions docs/intro/rev-lab1.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,38 @@
# Rev Lab 1: Baby Reverse

本节 Lab 由以下两部分组成:

- [Task 1: 课堂例题++](#task-1)(70 分)
- 课上练习题复现 (40分)
- 修改后的练习题 (30分)
- [Task 2: 伪随机?](task-2) (30分)

## Task 1 (70 points)

### Part 1 (40 points)

[题目下载链接](https://raw.githubusercontent.com/team-s2/summer_course_2023/master/src/intro/rev-lab1/practice)

课上作为练习的 `practice` 赛题,请回顾课上讲解的内容,完成题目并回答课上提出的 5 个问题:

1. 在题目中有一个函数是**加密**相关的函数,请找出这个函数的**地址**(Hex 格式作答,5 points)
2. 当你找到了这个加密函数,请找出程序在加密过程中所使用到的**密钥** (5 points)
3. 在这个题目中,程序简单封装了**短字符串**类型,请在 IDA 中恢复它的**结构体** (截图或用 C 语言表示该结构, 15 points)
4. 给出你解答的 flag 内容及 Writeup (15 points)

### Part 2 (30 points)

[题目下载链接](https://raw.githubusercontent.com/team-s2/summer_course_2023/master/src/intro/rev-lab1/rc4.tar.gz)

`practice` 赛题的基础上,该题目稍有修改,请你稍加探索完成题目并回答以下问题:

1. 程序中加密函数用到的的**密钥**是什么,你是如何找到它的(10 points)
2. 给出你解答的 flag 内容及 Writeup(20 points)

## Task 2 (30 points)

[题目下载链接](https://raw.githubusercontent.com/team-s2/summer_course_2023/master/src/intro/rev-lab1/pseudo.tar.gz)

看似随机却并不随机,看似模糊却又清晰,请你耐心分析并提交:

1. flag 内容及 Writeup (30 points)
7 changes: 3 additions & 4 deletions docs/intro/web-lab1.md
Original file line number Diff line number Diff line change
@@ -1,22 +1,21 @@
# Web Lab 1

### Task 1 (70%)
## Task 1 (70%)

Implement a DNS rebinder:

- resolve normally for common hosts
- resolve to different ip addresses (A record) in different responses for certain hosts
- low TTL

### Task 2 (30%)
## Task 2 (30%)

Finish the challenge SSRF in SchoolBus (https://zjusec.com/challenges/47)

(Using the rebinder in Task 1 is not required)



### What to submit
## What to submit

For task 1, code with comments (or additional docs) and a running demo.

Expand Down
1 change: 1 addition & 0 deletions mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,7 @@ nav:
- "general lab 0: 基础知识及技能": intro/lab0.md
- "web lab 1: 常见漏洞": intro/web-lab1.md
- "misc lab 1: 编解码及 OSINT": intro/misc-lab1.md
- "rev lab 1: Baby Reverse:": intro/rev-lab1.md
- "pwn lab 1: Code Injection": intro/pwn-lab1.md
# - misc 专题:
# - misc lab 1: tmp.md
Expand Down
Binary file added src/intro/rev-lab1/practice
Binary file not shown.
Binary file added src/intro/rev-lab1/pseudo.tar.gz
Binary file not shown.
Binary file added src/intro/rev-lab1/rc4.tar.gz
Binary file not shown.

0 comments on commit af20b98

Please sign in to comment.