giantbranch / pwn_deploy_chroot

可以方便地部署一个或者多个pwn题到一个docker容器中（使用chroot，并可以设置是否使用我自己写的catflag程序替换默认的/bin/sh程序，以增加安全性）

About me

安全研究员

• 二进制漏洞为主，偶尔加下IPS规则
• 自己继续瞎几把研究。。。

杂货店

• 其实世界很精彩，还有其他东西学习，毕业后开始不断看其他的书，主要以投资类为主，当然也看人物传记，历史，科幻，心理等
• 我所读过的书籍（包含信息安全专业及各种类别的书籍）：我所读过的书籍

最近博客

• Xvfb的使用与vnc连接
• wazuh文档学习：搭建实践
• OSSEC文档阅读学习实践
• 译-绕过 403
• 试用Kong

pwn_deploy_chroot's Issues

Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

test@ubuntu:~/pwn_deploy_chroot$ sudo docker-compose up --build -d 
Creating network "pwndeploychroot_default" with the default driver
Building pwn_deploy_chroot
Step 1/15 : FROM ubuntu:16.04
16.04: Pulling from library/ubuntu
18d680d61657: Pull complete
0addb6fece63: Pull complete
78e58219b215: Pull complete
eb6959a66df2: Pull complete
Digest: sha256:76702ec53c5e7771ba3f2c4f6152c3796c142af2b3cb1a02fce66c697db24f12
Status: Downloaded newer image for ubuntu:16.04
 ---> 4a689991aa24
Step 2/15 : RUN sed -i 's/archive.ubuntu.com/asia-east1.gce.archive.ubuntu.com/g' /etc/apt/sources.list && apt update && apt-get install -y lib32z1 xinetd && rm -rf /var/lib/apt/lists/ && rm -rf /root/.cache && apt-get autoclean && rm -rf /tmp/* /var/lib/apt/* /var/cache/* /var/log/*
 ---> Running in d6cd5479bf60

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

Get:1 http://security.ubuntu.com/ubuntu xenial-security InRelease [107 kB]
Get:2 http://security.ubuntu.com/ubuntu xenial-security/main amd64 Packages [727 kB]
Get:3 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial InRelease [247 kB]
Get:4 http://security.ubuntu.com/ubuntu xenial-security/restricted amd64 Packages [12.7 kB]
Get:5 http://security.ubuntu.com/ubuntu xenial-security/universe amd64 Packages [497 kB]
Get:6 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates InRelease [109 kB]
Get:7 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-backports InRelease [107 kB]
Get:8 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 Packages [1558 kB]
Get:9 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/restricted amd64 Packages [14.1 kB]
Get:10 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/universe amd64 Packages [9827 kB]
Get:11 http://security.ubuntu.com/ubuntu xenial-security/multiverse amd64 Packages [3747 B]
Get:12 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/multiverse amd64 Packages [176 kB]
Get:13 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages [1115 kB]
Get:14 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/restricted amd64 Packages [13.1 kB]
Get:15 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/universe amd64 Packages [894 kB]
Get:16 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/multiverse amd64 Packages [18.8 kB]
Get:17 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-backports/main amd64 Packages [7965 B]
Get:18 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-backports/universe amd64 Packages [8532 B]
Fetched 15.4 MB in 12s (1246 kB/s)
Reading package lists...
Building dependency tree...
Reading state information...
All packages are up to date.
Reading package lists...
Building dependency tree...
Reading state information...
The following additional packages will be installed:
  cron ifupdown iproute2 isc-dhcp-client isc-dhcp-common libatm1 libc6-i386
  libdns-export162 libestr0 libfile-copy-recursive-perl libgdbm3
  libisc-export160 libjson-c2 libmnl0 libperl5.22 libpopt0 libwrap0
  libxtables11 logrotate netbase perl perl-modules-5.22 rename rsyslog tcpd
  ucf update-inetd
Suggested packages:
  anacron checksecurity exim4 | postfix | mail-transport-agent ppp rdnssd
  iproute2-doc resolvconf avahi-autoipd isc-dhcp-client-ddns apparmor mailx
  perl-doc libterm-readline-gnu-perl | libterm-readline-perl-perl make
  rsyslog-mysql | rsyslog-pgsql rsyslog-doc rsyslog-gnutls rsyslog-gssapi
  rsyslog-relp
The following NEW packages will be installed:
  cron ifupdown iproute2 isc-dhcp-client isc-dhcp-common lib32z1 libatm1
  libc6-i386 libdns-export162 libestr0 libfile-copy-recursive-perl libgdbm3
  libisc-export160 libjson-c2 libmnl0 libperl5.22 libpopt0 libwrap0
  libxtables11 logrotate netbase perl perl-modules-5.22 rename rsyslog tcpd
  ucf update-inetd xinetd
0 upgraded, 29 newly installed, 0 to remove and 0 not upgraded.
Need to get 11.3 MB of archives.
After this operation, 58.1 MB of additional disk space will be used.
Err:1 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 cron amd64 3.0pl1-128ubuntu2
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:2 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libatm1 amd64 1:2.5.1-1.5
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:3 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libestr0 amd64 0.1.10-1
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:4 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libjson-c2 amd64 0.11-4ubuntu2
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:5 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libmnl0 amd64 1.0.3-5
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:6 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libpopt0 amd64 1.16-10
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:7 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libgdbm3 amd64 1.8.3-13.1
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:8 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libwrap0 amd64 7.6.q-25
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:9 http://security.ubuntu.com/ubuntu xenial-security/main amd64 perl-modules-5.22 all 5.22.1-9ubuntu0.5
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Ign:10 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libperl5.22 amd64 5.22.1-9ubuntu0.5
Err:9 http://security.ubuntu.com/ubuntu xenial-security/main amd64 perl-modules-5.22 all 5.22.1-9ubuntu0.5
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Ign:11 http://security.ubuntu.com/ubuntu xenial-security/main amd64 perl amd64 5.22.1-9ubuntu0.5
Err:10 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libperl5.22 amd64 5.22.1-9ubuntu0.5
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:12 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 iproute2 amd64 4.3.0-1ubuntu3.16.04.3
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:11 http://security.ubuntu.com/ubuntu xenial-security/main amd64 perl amd64 5.22.1-9ubuntu0.5
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:13 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 ifupdown amd64 0.8.10ubuntu1.4
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:14 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libisc-export160 amd64 1:9.10.3.dfsg.P4-8ubuntu1.11
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Ign:15 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libdns-export162 amd64 1:9.10.3.dfsg.P4-8ubuntu1.11
Err:14 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libisc-export160 amd64 1:9.10.3.dfsg.P4-8ubuntu1.11
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:16 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 isc-dhcp-client amd64 4.3.3-5ubuntu12.10
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:15 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libdns-export162 amd64 1:9.10.3.dfsg.P4-8ubuntu1.11
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:17 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 isc-dhcp-common amd64 4.3.3-5ubuntu12.10
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:18 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libxtables11 amd64 1.6.0-2ubuntu3
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:19 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 logrotate amd64 3.8.7-2ubuntu2.16.04.2
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:20 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 netbase all 5.3
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:21 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 ucf all 3.0036
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:22 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 rsyslog amd64 8.16.0-1ubuntu3
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:23 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libc6-i386 amd64 2.23-0ubuntu10
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:23 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libc6-i386 amd64 2.23-0ubuntu10
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:24 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 lib32z1 amd64 1:1.2.8.dfsg-2ubuntu4.1
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:25 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libfile-copy-recursive-perl all 0.38-1
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:26 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 rename all 0.20-4
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:27 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 tcpd amd64 7.6.q-25
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:28 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 update-inetd all 4.43
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:29 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 xinetd amd64 1:2.3.15-6
  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/c/cron/cron_3.0pl1-128ubuntu2_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/l/linux-atm/libatm1_2.5.1-1.5_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/libe/libestr/libestr0_0.1.10-1_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/j/json-c/libjson-c2_0.11-4ubuntu2_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/libm/libmnl/libmnl0_1.0.3-5_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/p/popt/libpopt0_1.16-10_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/g/gdbm/libgdbm3_1.8.3-13.1_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/t/tcp-wrappers/libwrap0_7.6.q-25_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-modules-5.22_5.22.1-9ubuntu0.5_all.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/p/perl/libperl5.22_5.22.1-9ubuntu0.5_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl_5.22.1-9ubuntu0.5_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/i/iproute2/iproute2_4.3.0-1ubuntu3.16.04.3_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/i/ifupdown/ifupdown_0.8.10ubuntu1.4_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libisc-export160_9.10.3.dfsg.P4-8ubuntu1.11_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libdns-export162_9.10.3.dfsg.P4-8ubuntu1.11_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/i/isc-dhcp/isc-dhcp-client_4.3.3-5ubuntu12.10_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/i/isc-dhcp/isc-dhcp-common_4.3.3-5ubuntu12.10_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/i/iptables/libxtables11_1.6.0-2ubuntu3_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/l/logrotate/logrotate_3.8.7-2ubuntu2.16.04.2_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/n/netbase/netbase_5.3_all.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/u/ucf/ucf_3.0036_all.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/r/rsyslog/rsyslog_8.16.0-1ubuntu3_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/g/glibc/libc6-i386_2.23-0ubuntu10_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/z/zlib/lib32z1_1.2.8.dfsg-2ubuntu4.1_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/libf/libfile-copy-recursive-perl/libfile-copy-recursive-perl_0.38-1_all.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/r/rename/rename_0.20-4_all.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/t/tcp-wrappers/tcpd_7.6.q-25_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/u/update-inetd/update-inetd_4.43_all.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/x/xinetd/xinetd_2.3.15-6_amd64.deb  Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'

E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
ERROR: Service 'pwn_deploy_chroot' failed to build: The command '/bin/sh -c sed -i 's/archive.ubuntu.com/asia-east1.gce.archive.ubuntu.com/g' /etc/apt/sources.list && apt update && apt-get install -y lib32z1 xinetd && rm -rf /var/lib/apt/lists/ && rm -rf /root/.cache && apt-get autoclean && rm -rf /tmp/* /var/lib/apt/* /var/cache/* /var/log/*' returned a non-zero code: 100

用one_gadget时无法getshell(打扰了，是**出题人瞎鸡巴搭建环境的问题)

pwn01.zip
这道题用one_gadget时本地可以getshell，服务器不行，然后你让我来提issue，我就来提了，希望你能更新一下之类的

如何指定搭建pwn题的环境为libc2.27呢

如果要用ubuntu18的话该怎么改

自带so文件的题目部署

有的题目给了指定版本的libc.so文件，可否支持这种部署呢？
例如代码可以这样：如果在bin里发现了文件夹，则部署文件夹里的程序，并加载同目录的so文件。不知道大牛有意向支持这种的功能不

关于已经完成搭建，但是无法nc连接

按道理说已经上线了，但是我自己是无法连接的

请求解答，万分感谢

无法正常执行system("xxx");

pwn_deploy_chroot/initialize.py

Line 124 in d86586b

ness_bin = '''&& cp /bin/sh /home/%s/bin && cp /bin/ls /home/%s/bin && cp /bin/cat /home/%s/bin'''

这里有bug，应该先在前面mkdir一个/home/%s/bin,再在这里cp xxx /home/%s/bin/.
否则只会cp过去一个名叫bin的cat二进制文件，导致system无法正常执行