安全研究员
- 二进制漏洞为主,偶尔加下IPS规则
- 自己继续瞎几把研究。。。
杂货店
- 其实世界很精彩,还有其他东西学习,毕业后开始不断看其他的书,主要以投资类为主,当然也看人物传记,历史,科幻,心理等
- 我所读过的书籍(包含信息安全专业及各种类别的书籍):我所读过的书籍
最近博客
可以方便地部署一个或者多个pwn题到一个docker容器中(使用chroot,并可以设置是否使用我自己写的catflag程序替换默认的/bin/sh程序,以增加安全性)
Home Page: https://www.giantbranch.cn/
安全研究员
杂货店
最近博客
test@ubuntu:~/pwn_deploy_chroot$ sudo docker-compose up --build -d
Creating network "pwndeploychroot_default" with the default driver
Building pwn_deploy_chroot
Step 1/15 : FROM ubuntu:16.04
16.04: Pulling from library/ubuntu
18d680d61657: Pull complete
0addb6fece63: Pull complete
78e58219b215: Pull complete
eb6959a66df2: Pull complete
Digest: sha256:76702ec53c5e7771ba3f2c4f6152c3796c142af2b3cb1a02fce66c697db24f12
Status: Downloaded newer image for ubuntu:16.04
---> 4a689991aa24
Step 2/15 : RUN sed -i 's/archive.ubuntu.com/asia-east1.gce.archive.ubuntu.com/g' /etc/apt/sources.list && apt update && apt-get install -y lib32z1 xinetd && rm -rf /var/lib/apt/lists/ && rm -rf /root/.cache && apt-get autoclean && rm -rf /tmp/* /var/lib/apt/* /var/cache/* /var/log/*
---> Running in d6cd5479bf60
WARNING: apt does not have a stable CLI interface. Use with caution in scripts.
Get:1 http://security.ubuntu.com/ubuntu xenial-security InRelease [107 kB]
Get:2 http://security.ubuntu.com/ubuntu xenial-security/main amd64 Packages [727 kB]
Get:3 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial InRelease [247 kB]
Get:4 http://security.ubuntu.com/ubuntu xenial-security/restricted amd64 Packages [12.7 kB]
Get:5 http://security.ubuntu.com/ubuntu xenial-security/universe amd64 Packages [497 kB]
Get:6 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates InRelease [109 kB]
Get:7 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-backports InRelease [107 kB]
Get:8 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 Packages [1558 kB]
Get:9 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/restricted amd64 Packages [14.1 kB]
Get:10 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/universe amd64 Packages [9827 kB]
Get:11 http://security.ubuntu.com/ubuntu xenial-security/multiverse amd64 Packages [3747 B]
Get:12 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/multiverse amd64 Packages [176 kB]
Get:13 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages [1115 kB]
Get:14 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/restricted amd64 Packages [13.1 kB]
Get:15 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/universe amd64 Packages [894 kB]
Get:16 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/multiverse amd64 Packages [18.8 kB]
Get:17 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-backports/main amd64 Packages [7965 B]
Get:18 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-backports/universe amd64 Packages [8532 B]
Fetched 15.4 MB in 12s (1246 kB/s)
Reading package lists...
Building dependency tree...
Reading state information...
All packages are up to date.
Reading package lists...
Building dependency tree...
Reading state information...
The following additional packages will be installed:
cron ifupdown iproute2 isc-dhcp-client isc-dhcp-common libatm1 libc6-i386
libdns-export162 libestr0 libfile-copy-recursive-perl libgdbm3
libisc-export160 libjson-c2 libmnl0 libperl5.22 libpopt0 libwrap0
libxtables11 logrotate netbase perl perl-modules-5.22 rename rsyslog tcpd
ucf update-inetd
Suggested packages:
anacron checksecurity exim4 | postfix | mail-transport-agent ppp rdnssd
iproute2-doc resolvconf avahi-autoipd isc-dhcp-client-ddns apparmor mailx
perl-doc libterm-readline-gnu-perl | libterm-readline-perl-perl make
rsyslog-mysql | rsyslog-pgsql rsyslog-doc rsyslog-gnutls rsyslog-gssapi
rsyslog-relp
The following NEW packages will be installed:
cron ifupdown iproute2 isc-dhcp-client isc-dhcp-common lib32z1 libatm1
libc6-i386 libdns-export162 libestr0 libfile-copy-recursive-perl libgdbm3
libisc-export160 libjson-c2 libmnl0 libperl5.22 libpopt0 libwrap0
libxtables11 logrotate netbase perl perl-modules-5.22 rename rsyslog tcpd
ucf update-inetd xinetd
0 upgraded, 29 newly installed, 0 to remove and 0 not upgraded.
Need to get 11.3 MB of archives.
After this operation, 58.1 MB of additional disk space will be used.
Err:1 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 cron amd64 3.0pl1-128ubuntu2
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:2 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libatm1 amd64 1:2.5.1-1.5
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:3 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libestr0 amd64 0.1.10-1
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:4 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libjson-c2 amd64 0.11-4ubuntu2
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:5 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libmnl0 amd64 1.0.3-5
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:6 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libpopt0 amd64 1.16-10
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:7 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libgdbm3 amd64 1.8.3-13.1
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:8 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libwrap0 amd64 7.6.q-25
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:9 http://security.ubuntu.com/ubuntu xenial-security/main amd64 perl-modules-5.22 all 5.22.1-9ubuntu0.5
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Ign:10 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libperl5.22 amd64 5.22.1-9ubuntu0.5
Err:9 http://security.ubuntu.com/ubuntu xenial-security/main amd64 perl-modules-5.22 all 5.22.1-9ubuntu0.5
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Ign:11 http://security.ubuntu.com/ubuntu xenial-security/main amd64 perl amd64 5.22.1-9ubuntu0.5
Err:10 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libperl5.22 amd64 5.22.1-9ubuntu0.5
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:12 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 iproute2 amd64 4.3.0-1ubuntu3.16.04.3
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:11 http://security.ubuntu.com/ubuntu xenial-security/main amd64 perl amd64 5.22.1-9ubuntu0.5
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:13 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 ifupdown amd64 0.8.10ubuntu1.4
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:14 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libisc-export160 amd64 1:9.10.3.dfsg.P4-8ubuntu1.11
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Ign:15 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libdns-export162 amd64 1:9.10.3.dfsg.P4-8ubuntu1.11
Err:14 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libisc-export160 amd64 1:9.10.3.dfsg.P4-8ubuntu1.11
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:16 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 isc-dhcp-client amd64 4.3.3-5ubuntu12.10
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:15 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libdns-export162 amd64 1:9.10.3.dfsg.P4-8ubuntu1.11
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:17 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 isc-dhcp-common amd64 4.3.3-5ubuntu12.10
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:18 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libxtables11 amd64 1.6.0-2ubuntu3
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:19 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 logrotate amd64 3.8.7-2ubuntu2.16.04.2
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:20 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 netbase all 5.3
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:21 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 ucf all 3.0036
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:22 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 rsyslog amd64 8.16.0-1ubuntu3
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:23 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libc6-i386 amd64 2.23-0ubuntu10
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:23 http://security.ubuntu.com/ubuntu xenial-security/main amd64 libc6-i386 amd64 2.23-0ubuntu10
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:24 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial-updates/main amd64 lib32z1 amd64 1:1.2.8.dfsg-2ubuntu4.1
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:25 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libfile-copy-recursive-perl all 0.38-1
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:26 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 rename all 0.20-4
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:27 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 tcpd amd64 7.6.q-25
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:28 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 update-inetd all 4.43
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
Err:29 http://asia-east1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 xinetd amd64 1:2.3.15-6
Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/c/cron/cron_3.0pl1-128ubuntu2_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/l/linux-atm/libatm1_2.5.1-1.5_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/libe/libestr/libestr0_0.1.10-1_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/j/json-c/libjson-c2_0.11-4ubuntu2_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/libm/libmnl/libmnl0_1.0.3-5_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/p/popt/libpopt0_1.16-10_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/g/gdbm/libgdbm3_1.8.3-13.1_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/t/tcp-wrappers/libwrap0_7.6.q-25_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-modules-5.22_5.22.1-9ubuntu0.5_all.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/p/perl/libperl5.22_5.22.1-9ubuntu0.5_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl_5.22.1-9ubuntu0.5_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/i/iproute2/iproute2_4.3.0-1ubuntu3.16.04.3_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/i/ifupdown/ifupdown_0.8.10ubuntu1.4_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libisc-export160_9.10.3.dfsg.P4-8ubuntu1.11_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/b/bind9/libdns-export162_9.10.3.dfsg.P4-8ubuntu1.11_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/i/isc-dhcp/isc-dhcp-client_4.3.3-5ubuntu12.10_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/i/isc-dhcp/isc-dhcp-common_4.3.3-5ubuntu12.10_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/i/iptables/libxtables11_1.6.0-2ubuntu3_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/l/logrotate/logrotate_3.8.7-2ubuntu2.16.04.2_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/n/netbase/netbase_5.3_all.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/u/ucf/ucf_3.0036_all.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/r/rsyslog/rsyslog_8.16.0-1ubuntu3_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/g/glibc/libc6-i386_2.23-0ubuntu10_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/z/zlib/lib32z1_1.2.8.dfsg-2ubuntu4.1_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/libf/libfile-copy-recursive-perl/libfile-copy-recursive-perl_0.38-1_all.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/r/rename/rename_0.20-4_all.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/t/tcp-wrappers/tcpd_7.6.q-25_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/u/update-inetd/update-inetd_4.43_all.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Failed to fetch http://asia-east1.gce.archive.ubuntu.com/ubuntu/pool/main/x/xinetd/xinetd_2.3.15-6_amd64.deb Temporary failure resolving 'asia-east1.gce.archive.ubuntu.com'
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
ERROR: Service 'pwn_deploy_chroot' failed to build: The command '/bin/sh -c sed -i 's/archive.ubuntu.com/asia-east1.gce.archive.ubuntu.com/g' /etc/apt/sources.list && apt update && apt-get install -y lib32z1 xinetd && rm -rf /var/lib/apt/lists/ && rm -rf /root/.cache && apt-get autoclean && rm -rf /tmp/* /var/lib/apt/* /var/cache/* /var/log/*' returned a non-zero code: 100
pwn01.zip
这道题用one_gadget时本地可以getshell,服务器不行,然后你让我来提issue,我就来提了,希望你能更新一下之类的
有的题目给了指定版本的libc.so文件,可否支持这种部署呢?
例如代码可以这样:如果在bin里发现了文件夹,则部署文件夹里的程序,并加载同目录的so文件。不知道大牛有意向支持这种的功能不
pwn_deploy_chroot/initialize.py
Line 124 in d86586b
这里有bug,应该先在前面mkdir一个/home/%s/bin,再在这里cp xxx /home/%s/bin/.
否则只会cp过去一个名叫bin的cat二进制文件,导致system无法正常执行
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.