-
Notifications
You must be signed in to change notification settings - Fork 2
/
atom.xml
1613 lines (1067 loc) · 73.8 KB
/
atom.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
<title>pikachu's Blog</title>
<subtitle>Easy coding,easy life.</subtitle>
<link href="/atom.xml" rel="self"/>
<link href="https://hitcxy.com/"/>
<updated>2023-08-10T16:14:48.048Z</updated>
<id>https://hitcxy.com/</id>
<author>
<name>pikachu</name>
</author>
<generator uri="http://hexo.io/">Hexo</generator>
<entry>
<title>study</title>
<link href="https://hitcxy.com/2023/sstudy/"/>
<id>https://hitcxy.com/2023/sstudy/</id>
<published>2023-07-04T16:50:58.000Z</published>
<updated>2023-08-10T16:14:48.048Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>学习记录</li>
</ul>
</summary>
<category term="pwn" scheme="https://hitcxy.com/categories/pwn/"/>
<category term="pwn" scheme="https://hitcxy.com/tags/pwn/"/>
</entry>
<entry>
<title>0ctf 2022 nft market</title>
<link href="https://hitcxy.com/2022/0ctf2022/"/>
<id>https://hitcxy.com/2022/0ctf2022/</id>
<published>2022-09-19T12:36:49.000Z</published>
<updated>2022-09-19T13:06:56.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>0ctf 2022 nft 题目,失败的复盘,赛中调试出来了进入 verifyCoupon 后 orderid 会变成 0,但没有继续调试后面的 orderid,233333,赛后才知道了是 solidity 8.16 版本之前的 bug</li>
<li>主要漏洞原理参考 <a href="https://blog.soliditylang.org/2022/08/08/calldata-tuple-reencoding-head-overflow-bug/" rel="external nofollow noopener noreferrer" target="_blank">https://blog.soliditylang.org/2022/08/08/calldata-tuple-reencoding-head-overflow-bug/</a></li>
<li>具体就不分析了,别的师傅已经写的很好了,这里就只放出自己的 exp</li>
<li>参考 <a href="https://s3cunda.github.io/2022/09/19/0ctf-2022-NFT-Market.html" rel="external nofollow noopener noreferrer" target="_blank">https://s3cunda.github.io/2022/09/19/0ctf-2022-NFT-Market.html</a></li>
</ul>
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/0ctf2022/1.png" alt></p>
</summary>
<category term="0ctf 2022" scheme="https://hitcxy.com/categories/0ctf-2022/"/>
<category term="0ctf2022" scheme="https://hitcxy.com/tags/0ctf2022/"/>
<category term="NFT" scheme="https://hitcxy.com/tags/NFT/"/>
</entry>
<entry>
<title>qwb2022 第六届强网杯线上赛区块链 bytebyte</title>
<link href="https://hitcxy.com/2022/bytebyte/"/>
<id>https://hitcxy.com/2022/bytebyte/</id>
<published>2022-08-03T13:53:21.000Z</published>
<updated>2022-08-03T14:32:30.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>第六届 <code>qwb</code> 线下赛 <code>bytebyte</code> 赛题 <code>WP</code></li>
<li>恭喜中国科学技术大学师傅一血</li>
<li>考点是 <a href="https://en.wikipedia.org/wiki/Return-oriented_programming" rel="external nofollow noopener noreferrer" target="_blank">Return Oriented Programming</a></li>
<li><code>revenge of EGM</code>,堆栈细节可参考 <a href="https://hitcxy.com/2020/egm/">https://hitcxy.com/2020/egm/</a></li>
<li>相比于 <code>EGM</code> ,<code>bytebyte</code> 调整了循环变量的位置,循环变量是个范围,按照个人的构思,如果 <code>calldata</code> 长度是 <code>4+32*11</code> 字节,则这个值是固定的,变相让循环变量起到固定 <code>canary</code> 的作用,不过也不能排除更短的 <code>calldata</code>,所以题目设计是比较 <code>calldata</code> 的数值大小。</li>
</ul>
</summary>
<category term="qwb2022" scheme="https://hitcxy.com/categories/qwb2022/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
<category term="qwb2022" scheme="https://hitcxy.com/tags/qwb2022/"/>
</entry>
<entry>
<title>chainflag</title>
<link href="https://hitcxy.com/2021/chainflag/"/>
<id>https://hitcxy.com/2021/chainflag/</id>
<published>2021-06-26T07:41:29.000Z</published>
<updated>2021-06-26T14:42:04.000Z</updated>
<summary type="html">
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/chainflag/1.jpg" alt></p>
<ul>
<li>欢迎关注 <a href="https://chainflag.org/" rel="external nofollow noopener noreferrer" target="_blank">chainflag</a> 平台</li>
</ul>
</summary>
<category term="tools" scheme="https://hitcxy.com/categories/tools/"/>
<category term="tools" scheme="https://hitcxy.com/tags/tools/"/>
<category term="chainflag" scheme="https://hitcxy.com/tags/chainflag/"/>
</entry>
<entry>
<title>qwb2021 第五届强网杯线上赛区块链</title>
<link href="https://hitcxy.com/2021/qwb2021/"/>
<id>https://hitcxy.com/2021/qwb2021/</id>
<published>2021-06-15T00:40:22.000Z</published>
<updated>2021-07-06T03:52:44.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>第五届 <code>qwb</code>,<code>blockchains</code> 的 <code>WP</code>,勿喷</li>
<li>随时欢迎大家来交流,别喷就好,谢谢</li>
<li>没有官方 <code>WP</code> ,我只是自己写着玩</li>
<li>题目环境保留到 <code>2021</code> 年 <code>6</code> 月 <code>18</code> 日,想要验证测试的小伙伴可以自行测试</li>
</ul>
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/qwb2021/1.png" alt></p>
</summary>
<category term="qwb2021" scheme="https://hitcxy.com/categories/qwb2021/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
<category term="qwb2021" scheme="https://hitcxy.com/tags/qwb2021/"/>
</entry>
<entry>
<title>XCTF FINAL 2021 FlyToMoon</title>
<link href="https://hitcxy.com/2021/xctf-final-2021/"/>
<id>https://hitcxy.com/2021/xctf-final-2021/</id>
<published>2021-06-08T08:00:51.000Z</published>
<updated>2021-06-08T08:27:40.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li><code>XCTF FINAL</code> 二次出题,清晰记得 <code>19</code> 年那次出题的痛,被各位师傅硬是玩成了 <code>AWD</code> 模式,惨惨</li>
<li>回想出题模式由最开始的共享地址 -&gt; 采取随机数部署不同的地址 -&gt; <code>geth + POA</code> 禁用部分 <code>API</code> ,让选手有更公平的做题体验,防止“抄作业”,也算比较圆满了</li>
<li>本次题目也比较水,借鉴 <code>balsn-Election</code> 的 <code>ABI Encoding</code> 考点,随便写写</li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
<category term="xctf final" scheme="https://hitcxy.com/tags/xctf-final/"/>
<category term="FlyToMoon" scheme="https://hitcxy.com/tags/FlyToMoon/"/>
</entry>
<entry>
<title>CTF 区块链题目防抄作业</title>
<link href="https://hitcxy.com/2021/ctf-eth-env/"/>
<id>https://hitcxy.com/2021/ctf-eth-env/</id>
<published>2021-05-30T17:52:17.000Z</published>
<updated>2021-05-30T18:32:24.000Z</updated>
<summary type="html">
<ul>
<li><code>ctf</code> 区块链防抄作业的环境</li>
<li><code>geth</code> 私链 + <code>POA</code></li>
<li>我只是个无情的搬运工,在第六届 <code>xctf final</code> 中初次使用,不知道做题的师傅什么感觉</li>
<li>👉 <a href="https://github.com/chainflag/ctf-eth-env" rel="external nofollow noopener noreferrer" target="_blank">https://github.com/chainflag/ctf-eth-env</a> 👈 欢迎 <code>star</code></li>
<li><p>有想法的师傅也可以加入我们 <a href="https://github.com/chainflag" rel="external nofollow noopener noreferrer" target="_blank">chainflag</a> 🙈</p>
</summary>
<category term="tools" scheme="https://hitcxy.com/categories/tools/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
<category term="tools" scheme="https://hitcxy.com/tags/tools/"/>
</entry>
<entry>
<title>CTF Wiki 上加入 Blockchain 专栏</title>
<link href="https://hitcxy.com/2021/ctf-wiki/"/>
<id>https://hitcxy.com/2021/ctf-wiki/</id>
<published>2021-03-14T05:12:34.000Z</published>
<updated>2021-06-18T11:46:34.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>最近和 <i class="fa fa-github fa-lg"></i> <a href="https://github.com/tkmikan" rel="external nofollow noopener noreferrer" target="_blank">tkmk</a> 师傅、<i class="fa fa-github fa-lg"></i> <a href="https://github.com/syang-ng" rel="external nofollow noopener noreferrer" target="_blank">syang</a> 师傅、<i class="fa fa-github fa-lg"></i> <a href="https://github.com/Vergissmeinnichtz" rel="external nofollow noopener noreferrer" target="_blank">Ver</a> 师傅(不分顺序)花了一周的时间,在 <span id="inline-blue">CTF Wiki</span> 上写了关于 <span id="inline-green">Blockchain</span> 的 <code>Topic</code>,这里是 👉 <a href="https://ctf-wiki.org/" rel="external nofollow noopener noreferrer" target="_blank">CTF Wiki</a> 入口 👈</li>
<li>初心是想着留下点什么东西,如果有小伙伴发现问题可以提 <code>issue</code>,我们看到会及时回复并进行更改</li>
<li>如果有想要补充关于 <span id="inline-green">Blockchain</span> 内容的小伙伴,也可以联系我</li>
<li>同时我们建立了一个 <span id="inline-yellow">Chain Flag Organization</span>,这里是 👉 <a href="https://github.com/chainflag" rel="external nofollow noopener noreferrer" target="_blank">Chain Flag</a> 入口 👈 ,欢迎关注 👀 ,有兴趣的小伙伴也可以加入我们</li>
<li>我在摸鱼~</li>
<li>后续 <i class="fa fa-github fa-lg"></i> <a href="https://github.com/iczc" rel="external nofollow noopener noreferrer" target="_blank">iczc</a> 师傅还会补充其他公链安全相关内容,敬请期待</li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="CTF Wiki" scheme="https://hitcxy.com/tags/CTF-Wiki/"/>
<category term="challenges" scheme="https://hitcxy.com/tags/challenges/"/>
</entry>
<entry>
<title>Balsn CTF 2020 - Election</title>
<link href="https://hitcxy.com/2021/balsn2020-election/"/>
<id>https://hitcxy.com/2021/balsn2020-election/</id>
<published>2021-03-07T07:45:33.000Z</published>
<updated>2022-10-23T01:48:08.000Z</updated>
<summary type="html">
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/balsn2020_election/1.jpeg" alt><br><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/balsn2020_election/2.jpg" alt></p>
<p><strong>前言</strong></p>
<ul>
<li>复现 <code>balsn2020 ctf</code> 中的 <code>Election</code> 区块链题目,当时没做出来😭</li>
<li><code>wtcl</code> ,都 <code>2021</code> 了,还在看 <code>2020</code> 的题目</li>
<li>这篇会写的很详细,大佬勿喷🙈</li>
<li>具体分析及官方 <code>WP</code> 如下:<a href="https://x9453.github.io/2021/02/27/Balsn-CTF-2020-Election/" rel="external nofollow noopener noreferrer" target="_blank">https://x9453.github.io/2021/02/27/Balsn-CTF-2020-Election/</a></li>
<li>源码 <a href="https://github.com/hitcxy/blockchain-challenges/tree/master/2020/balsn/Election" rel="external nofollow noopener noreferrer" target="_blank">https://github.com/hitcxy/blockchain-challenges/tree/master/2020/balsn/Election</a></li>
<li>复现地址为:<code>ropsten@0xef31471E3004a78Ae403858BbcB27D6d1f37791C</code></li>
<li>关于 <code>ABI</code> 及 <code>ABI Encoding</code> 相关知识可以查看我的另一片博客 👉 <a href="https://hitcxy.com/2021/argument-encoding/">Function Selector and Argument Encoding</a> 👈</li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="balsn2020" scheme="https://hitcxy.com/tags/balsn2020/"/>
<category term="election" scheme="https://hitcxy.com/tags/election/"/>
</entry>
<entry>
<title>Function Selector and Argument Encoding</title>
<link href="https://hitcxy.com/2021/argument-encoding/"/>
<id>https://hitcxy.com/2021/argument-encoding/</id>
<published>2021-03-06T14:43:05.000Z</published>
<updated>2021-03-13T11:25:36.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>最近看了一些奇怪的东西,触及到了知识盲区,就水了一篇博客记录一下</li>
<li>写的也不是很专业,只是按照个人理解,有错误的话欢迎及时交流 👀</li>
<li>参考了 👉 <a href="https://docs.soliditylang.org/en/v0.8.1/abi-spec.html#" rel="external nofollow noopener noreferrer" target="_blank">官方文档</a> 👈</li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="Solidity" scheme="https://hitcxy.com/tags/Solidity/"/>
<category term="Function Selector" scheme="https://hitcxy.com/tags/Function-Selector/"/>
<category term="Argument Encoding" scheme="https://hitcxy.com/tags/Argument-Encoding/"/>
</entry>
<entry>
<title>🌟ctf 2021 区块链 StArNDBOX</title>
<link href="https://hitcxy.com/2021/6-ctf2021/"/>
<id>https://hitcxy.com/2021/6-ctf2021/</id>
<published>2021-01-19T16:24:28.000Z</published>
<updated>2021-01-20T15:42:14.000Z</updated>
<summary type="html">
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/%2Actf2021/1.png" alt></p>
<p><strong>前言</strong></p>
<ul>
<li>🌟🌟🌟🌟🌟🌟战队组织的比赛,其中有一道区块链题目,就花了会时间看看</li>
</ul>
</summary>
<category term="🌟ctf2021" scheme="https://hitcxy.com/categories/%F0%9F%8C%9Fctf2021/"/>
<category term="🌟ctf2021" scheme="https://hitcxy.com/tags/%F0%9F%8C%9Fctf2021/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
</entry>
<entry>
<title>第三届realworld 区块链wp</title>
<link href="https://hitcxy.com/2021/rw2021/"/>
<id>https://hitcxy.com/2021/rw2021/</id>
<published>2021-01-12T15:50:08.000Z</published>
<updated>2021-03-14T01:34:34.000Z</updated>
<summary type="html">
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/rw2021/1.jpeg" alt></p>
<p><strong>前言</strong></p>
<ul>
<li>第三届 <code>realworld</code>, <code>blockchains</code> 的 <code>WP</code></li>
<li>总共有三题,队伍总共做出两道,后续会持续更新</li>
<li>随时欢迎大家交流,随便写写</li>
<li>点击这里 -&gt; <a href="https://github.com/hitcxy/blockchain-challenges/tree/master/2021/realworld" rel="external nofollow noopener noreferrer" target="_blank">题目附件</a></li>
</ul>
</summary>
<category term="realworld2021" scheme="https://hitcxy.com/categories/realworld2021/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
<category term="realworld2021" scheme="https://hitcxy.com/tags/realworld2021/"/>
</entry>
<entry>
<title>华为鸿蒙场区块链 ContractGame</title>
<link href="https://hitcxy.com/2020/contractgame/"/>
<id>https://hitcxy.com/2020/contractgame/</id>
<published>2020-12-28T07:54:32.000Z</published>
<updated>2020-12-28T08:45:30.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>华为鸿蒙场区块链题目</li>
<li>水题,我 <code>Ver</code> 喷的题都是水题</li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="Smart Contract" scheme="https://hitcxy.com/tags/Smart-Contract/"/>
<category term="华为鸿蒙场 ctf" scheme="https://hitcxy.com/tags/%E5%8D%8E%E4%B8%BA%E9%B8%BF%E8%92%99%E5%9C%BA-ctf/"/>
</entry>
<entry>
<title>华为鲲鹏计算场区块链 boxgame</title>
<link href="https://hitcxy.com/2020/boxgame/"/>
<id>https://hitcxy.com/2020/boxgame/</id>
<published>2020-12-26T12:26:36.000Z</published>
<updated>2022-12-24T13:11:10.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>华为鲲鹏计算场区块链题目</li>
<li>一个沙箱游戏,比较简单</li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="Smart Contract" scheme="https://hitcxy.com/tags/Smart-Contract/"/>
<category term="华为鲲鹏计算 ctf" scheme="https://hitcxy.com/tags/%E5%8D%8E%E4%B8%BA%E9%B2%B2%E9%B9%8F%E8%AE%A1%E7%AE%97-ctf/"/>
</entry>
<entry>
<title>华为云安全场区块链 ethenc</title>
<link href="https://hitcxy.com/2020/ethenc/"/>
<id>https://hitcxy.com/2020/ethenc/</id>
<published>2020-12-26T12:20:07.000Z</published>
<updated>2020-12-26T12:26:18.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>华为云安全场区块链题目</li>
<li>其实很简单,和区块链关系不大</li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="Smart Contract" scheme="https://hitcxy.com/tags/Smart-Contract/"/>
<category term="华为云安全 ctf" scheme="https://hitcxy.com/tags/%E5%8D%8E%E4%B8%BA%E4%BA%91%E5%AE%89%E5%85%A8-ctf/"/>
</entry>
<entry>
<title>bjdctf_4th</title>
<link href="https://hitcxy.com/2020/bjdctf-4th/"/>
<id>https://hitcxy.com/2020/bjdctf-4th/</id>
<published>2020-12-26T05:24:43.000Z</published>
<updated>2020-12-26T05:39:54.000Z</updated>
<summary type="html">
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/BJDCTF_4/1.png" alt></p>
<p><strong>前言</strong></p>
<ul>
<li>首先圣诞哈皮丫,圣诞参加了 <code>BJDCTF 4th</code> ,可惜由于是周五,时间不太充足,大概总的做题时间就两个小时,就只把自己擅长的区块链的题目做了一下</li>
<li>感谢出题人小红花师傅没有暴打我</li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="BJDCTF 4th" scheme="https://hitcxy.com/tags/BJDCTF-4th/"/>
<category term="Smart Contract" scheme="https://hitcxy.com/tags/Smart-Contract/"/>
</entry>
<entry>
<title>Security Innovation</title>
<link href="https://hitcxy.com/2020/securityinnovation/"/>
<id>https://hitcxy.com/2020/securityinnovation/</id>
<published>2020-11-11T07:00:51.000Z</published>
<updated>2020-12-04T00:36:50.000Z</updated>
<summary type="html">
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/Security_Innovation/1.jpg" alt></p>
<p><strong>前言</strong></p>
<ul>
<li>双十一哈皮🐶</li>
<li><a href="https://blockchain-ctf.securityinnovation.com/#/" rel="external nofollow noopener noreferrer" target="_blank">https://blockchain-ctf.securityinnovation.com/#/</a></li>
<li>做了一遍,感觉这个网站上面的题目可能更贴近实际一些,新手小白刷完 <a href="https://ethernaut.openzeppelin.com/" rel="external nofollow noopener noreferrer" target="_blank">https://ethernaut.openzeppelin.com/</a> 之后,可以选择性来做这个网站的题目</li>
<li>难度还是有的,还有很多小 <code>trick</code> ,目前上面是 <code>13</code> 道题目</li>
<li>看了《数码宝贝:最后的进化》,爷青结,然后发现好久没做题了,熟悉一下做题,大佬勿喷,不是 <code>WP</code> ,随便写一下</li>
<li>很多是参考了网上的 <code>wp</code> 的内容 懒癌患者 :)</li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="Solidity" scheme="https://hitcxy.com/tags/Solidity/"/>
<category term="Smart Contract" scheme="https://hitcxy.com/tags/Smart-Contract/"/>
<category term="SecurityInnovatio" scheme="https://hitcxy.com/tags/SecurityInnovatio/"/>
</entry>
<entry>
<title>ctf区块链出题模板 docker部署</title>
<link href="https://hitcxy.com/2020/blockchain-template/"/>
<id>https://hitcxy.com/2020/blockchain-template/</id>
<published>2020-11-05T12:50:14.000Z</published>
<updated>2020-11-05T13:05:00.000Z</updated>
<summary type="html">
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/blockchain_template/1.jpg" alt></p>
<ul>
<li><code>ctf</code> 区块链出题模板</li>
<li><code>docker</code> 一键部署</li>
<li>个人喜欢的出题方式</li>
<li>部署合约的外部账户随机生成,每个选手都不一样,在一定程度上可防止“抄作业”</li>
</ul>
</summary>
<category term="tools" scheme="https://hitcxy.com/categories/tools/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
<category term="tools" scheme="https://hitcxy.com/tags/tools/"/>
</entry>
<entry>
<title>调试evm字节码-radare2</title>
<link href="https://hitcxy.com/2020/radare2/"/>
<id>https://hitcxy.com/2020/radare2/</id>
<published>2020-09-26T09:18:05.000Z</published>
<updated>2020-09-27T06:27:00.000Z</updated>
<summary type="html">
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/radare2/1.png" alt></p>
<p><strong>前言</strong></p>
<ul>
<li>不经意发现的 <code>radare2</code> 也可以调试 <code>EVM bytecode</code></li>
<li>可调试交易实时查看 <code>stack</code> 和 <code>memory</code> 信息</li>
<li>不断探索好用好玩的功能,不断更新</li>
<li>具体的指令及其操作就靠自己咯</li>
</ul>
</summary>
<category term="tools" scheme="https://hitcxy.com/categories/tools/"/>
<category term="tools" scheme="https://hitcxy.com/tags/tools/"/>
<category term="evm" scheme="https://hitcxy.com/tags/evm/"/>
</entry>
<entry>
<title>qwb2020 第四届强网杯线下赛区块链 EGM</title>
<link href="https://hitcxy.com/2020/egm/"/>
<id>https://hitcxy.com/2020/egm/</id>
<published>2020-09-22T08:28:07.000Z</published>
<updated>2022-07-11T09:46:08.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>第四届 <code>qwb</code> 线下赛 <code>EGM</code> 赛题 <code>WP</code></li>
<li>考点是 <a href="https://en.wikipedia.org/wiki/Return-oriented_programming" rel="external nofollow noopener noreferrer" target="_blank">Return Oriented Programming</a></li>
<li>借用工具 <code>ida-evm</code> 反汇编辅助分析</li>
<li>也可借助在线工具 <a href="https://www.trustlook.com/services/smart.html" rel="external nofollow noopener noreferrer" target="_blank">https://www.trustlook.com/services/smart.html</a> 反编译辅助分析
</summary>
<category term="qwb2020" scheme="https://hitcxy.com/categories/qwb2020/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
<category term="qwb2020" scheme="https://hitcxy.com/tags/qwb2020/"/>
</entry>
<entry>
<title>第一届钓鱼城杯 strictmathematician WP</title>
<link href="https://hitcxy.com/2020/strictmathematician/"/>
<id>https://hitcxy.com/2020/strictmathematician/</id>
<published>2020-08-30T13:38:25.000Z</published>
<updated>2020-10-13T13:13:54.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>第一届钓鱼城杯,2020线上智博会</li>
<li><code>strictmathmatician</code> 的 <code>WP</code></li>
</ul>
</summary>
<category term="钓鱼城杯" scheme="https://hitcxy.com/categories/%E9%92%93%E9%B1%BC%E5%9F%8E%E6%9D%AF/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
<category term="钓鱼城杯" scheme="https://hitcxy.com/tags/%E9%92%93%E9%B1%BC%E5%9F%8E%E6%9D%AF/"/>
</entry>
<entry>
<title>qwb2020 第四届强网杯线上赛区块链</title>
<link href="https://hitcxy.com/2020/qwb2020/"/>
<id>https://hitcxy.com/2020/qwb2020/</id>
<published>2020-08-24T02:28:03.000Z</published>
<updated>2023-03-20T15:28:42.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>第四届 <code>qwb</code>,<code>blockchains</code> 的 <code>WP</code>,勿喷</li>
<li>题目考查的点子也不是很新,勿喷2333</li>
<li>随时欢迎大家来交流,别喷就好,谢谢</li>
<li>没有官方 <code>WP</code> ,我只是自己写着玩</li>
</ul>
</summary>
<category term="qwb2020" scheme="https://hitcxy.com/categories/qwb2020/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
<category term="qwb2020" scheme="https://hitcxy.com/tags/qwb2020/"/>
</entry>
<entry>
<title>一步一步构建 dl-runtime-resolve</title>
<link href="https://hitcxy.com/2020/stepbystep-dl-runtime-resolve/"/>
<id>https://hitcxy.com/2020/stepbystep-dl-runtime-resolve/</id>
<published>2020-08-18T01:51:51.000Z</published>
<updated>2020-09-25T15:00:32.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>一步一步构建 <code>dl-runtime-resolve</code>,详细理解其解析过程</li>
<li>参考 <a href="http://pwn4.fun/2016/11/09/Return-to-dl-resolve/" rel="external nofollow noopener noreferrer" target="_blank">http://pwn4.fun/2016/11/09/Return-to-dl-resolve/</a></li>
<li>参考 <a href="https://ctf-wiki.github.io/ctf-wiki/pwn/linux/stackoverflow/advanced-rop-zh/" rel="external nofollow noopener noreferrer" target="_blank">https://ctf-wiki.github.io/ctf-wiki/pwn/linux/stackoverflow/advanced-rop-zh/</a></li>
<li><code>elf</code> 文件链接 <a href="https://github.com/hitcxy/pwn-challenges/tree/master/study" rel="external nofollow noopener noreferrer" target="_blank">https://github.com/hitcxy/pwn-challenges/tree/master/study</a></li>
</ul>
</summary>
<category term="pwn" scheme="https://hitcxy.com/categories/pwn/"/>
<category term="pwn" scheme="https://hitcxy.com/tags/pwn/"/>
</entry>
<entry>
<title>dl-runtime-resolve</title>
<link href="https://hitcxy.com/2020/dl-runtime-resolve/"/>
<id>https://hitcxy.com/2020/dl-runtime-resolve/</id>
<published>2020-08-16T11:50:54.000Z</published>
<updated>2023-07-27T15:34:28.900Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>在<code>Linux</code>中如果程序想要调用其它动态链接库的函数,必须要在程序加载的时候动态链接;在一个程序运行过程中,可能很多函数在程序执行完时都不会用到,比如一些错误处理函数或者一些用户很少用到的功能模块,所以ELF采用一种叫做延迟绑定<code>(Lazy Binding)</code>的做法,基本思想就是当函数第一次被调用的时候才进行绑定(符号查找、重定位等);而在<code>Linux</code>中是利用<code>_dl_runtime_resolve(link_map_obj, reloc_index)</code>函数来对动态链接的函数进行重定位的。</li>
</ul>
</summary>
<category term="pwn" scheme="https://hitcxy.com/categories/pwn/"/>
<category term="pwn" scheme="https://hitcxy.com/tags/pwn/"/>
<category term="elf" scheme="https://hitcxy.com/tags/elf/"/>
</entry>
<entry>
<title>ret2csu</title>
<link href="https://hitcxy.com/2020/ret2csu/"/>
<id>https://hitcxy.com/2020/ret2csu/</id>
<published>2020-08-16T07:14:47.000Z</published>
<updated>2020-09-25T15:00:32.000Z</updated>
<summary type="html">
<ul>
<li><code>ctf-wiki</code> 中 <code>ret2csu</code> ,对于 <code>64</code> 位程序,详细参考 <a href="https://ctf-wiki.github.io/ctf-wiki/pwn/linux/stackoverflow/medium-rop-zh/" rel="external nofollow noopener noreferrer" target="_blank">ctf-wiki</a></li>
<li>我的测试环境为 <code>ubuntu18.04</code> ,因为这个环境卡了好久,多了一条指令,最后总是跳不过去</li>
</ul>
</summary>
<category term="pwn" scheme="https://hitcxy.com/categories/pwn/"/>
<category term="pwn" scheme="https://hitcxy.com/tags/pwn/"/>
<category term="ret2csu" scheme="https://hitcxy.com/tags/ret2csu/"/>
</entry>
<entry>
<title>32&64</title>
<link href="https://hitcxy.com/2020/32-64/"/>
<id>https://hitcxy.com/2020/32-64/</id>
<published>2020-07-26T06:45:19.000Z</published>
<updated>2020-09-25T15:00:32.000Z</updated>
<summary type="html">
<ul>
<li><code>32</code> 位和 <code>64</code> 位程序的一些简单区别</li>
<li>随时更新,想到哪写到哪</li>
</ul>
</summary>
<category term="study" scheme="https://hitcxy.com/categories/study/"/>
<category term="pwn" scheme="https://hitcxy.com/tags/pwn/"/>
<category term="study" scheme="https://hitcxy.com/tags/study/"/>
</entry>
<entry>
<title>ret2libc3</title>
<link href="https://hitcxy.com/2020/ret2libc3/"/>
<id>https://hitcxy.com/2020/ret2libc3/</id>
<published>2020-07-25T16:52:04.000Z</published>
<updated>2023-07-02T15:49:06.747Z</updated>
<summary type="html">
<ul>
<li><code>ctf-wiki</code> 中 <code>ret2libc3</code></li>
<li>没有 <code>system</code> 和 <code>/bin/sh</code> ,泄漏 <code>libc</code>
</summary>
<category term="pwn" scheme="https://hitcxy.com/categories/pwn/"/>
<category term="pwn" scheme="https://hitcxy.com/tags/pwn/"/>
<category term="ret2libc3" scheme="https://hitcxy.com/tags/ret2libc3/"/>
</entry>
<entry>
<title>plt&got</title>
<link href="https://hitcxy.com/2020/plt-got/"/>
<id>https://hitcxy.com/2020/plt-got/</id>
<published>2020-07-25T05:39:16.000Z</published>
<updated>2020-09-25T15:00:32.000Z</updated>
<summary type="html">
<ul>
<li>学习一些 <code>pwn</code> 的知识,简单记录帮助自己理解
</summary>
<category term="pwn" scheme="https://hitcxy.com/categories/pwn/"/>
<category term="pwn" scheme="https://hitcxy.com/tags/pwn/"/>
<category term="plt" scheme="https://hitcxy.com/tags/plt/"/>
<category term="got" scheme="https://hitcxy.com/tags/got/"/>
</entry>
<entry>
<title>第五空间 CreativityPlus & SafeDelegatecall</title>
<link href="https://hitcxy.com/2020/creativityplus/"/>
<id>https://hitcxy.com/2020/creativityplus/</id>
<published>2020-06-29T02:13:09.000Z</published>
<updated>2021-03-10T11:47:14.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>第五空间 <code>creativityplus</code> 题目</li>
<li><code>creativityplus</code> 题目有个非预期,直接部署一个字节 <code>stop</code> 指令也可以,<code>0x600a600c60003960016000f3</code>+<code>00</code></li>
<li>文章介绍预期解
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="Create2" scheme="https://hitcxy.com/tags/Create2/"/>
<category term="Solidity" scheme="https://hitcxy.com/tags/Solidity/"/>
<category term="Delegatecall" scheme="https://hitcxy.com/tags/Delegatecall/"/>
</entry>
<entry>
<title>以太坊蜜罐合约收集列表</title>
<link href="https://hitcxy.com/2020/honeypot-list/"/>
<id>https://hitcxy.com/2020/honeypot-list/</id>
<published>2020-06-11T15:18:24.000Z</published>
<updated>2021-01-23T00:30:22.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>主链上的蜜罐合约</li>
<li>不断更新列表</li>
</ul>
</summary>
<category term="Ethereum" scheme="https://hitcxy.com/categories/Ethereum/"/>
<category term="Ethereum" scheme="https://hitcxy.com/tags/Ethereum/"/>
<category term="Etherscan" scheme="https://hitcxy.com/tags/Etherscan/"/>
</entry>
<entry>
<title>Real World CTF Finals 2019 - Montagy</title>
<link href="https://hitcxy.com/2020/Montagy/"/>
<id>https://hitcxy.com/2020/Montagy/</id>
<published>2020-06-11T03:00:09.000Z</published>
<updated>2020-10-13T13:14:14.000Z</updated>
<summary type="html">
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/rw2019_Montagy/1.png" alt></p>
<p><strong>前言</strong></p>
<ul>
<li><code>rw2019 montagy</code> 区块链题目</li>
<li>复现了,但是没有记录过程,这里只记录心得</li>
<li>复现的合约地址:<a href="https://ropsten.etherscan.io/address/0xd95C819d1DFBD085dFf0b3351230958Cb6075957" rel="external nofollow noopener noreferrer" target="_blank">0xd95C819d1DFBD085dFf0b3351230958Cb6075957@ropsten</a></li>
<li>详细 <code>WP</code> 见 <a href="https://x9453.github.io/2020/01/26/Real-World-CTF-Finals-2019-Montagy/" rel="external nofollow noopener noreferrer" target="_blank">https://x9453.github.io/2020/01/26/Real-World-CTF-Finals-2019-Montagy/</a></li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
<category term="rw2019" scheme="https://hitcxy.com/tags/rw2019/"/>
</entry>
<entry>
<title>RCTF2020 roiscoin</title>
<link href="https://hitcxy.com/2020/rctf2020-roiscoin/"/>
<id>https://hitcxy.com/2020/rctf2020-roiscoin/</id>
<published>2020-06-02T01:14:56.000Z</published>
<updated>2021-10-26T10:48:46.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li><code>RCTF2020</code> 区块链 <code>roiscoin</code> 题目</li>
<li>以太坊 <code>Ropsten</code> 测试链</li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
<category term="rctf 2020" scheme="https://hitcxy.com/tags/rctf-2020/"/>
<category term="roiscoin" scheme="https://hitcxy.com/tags/roiscoin/"/>
</entry>
<entry>
<title>一道很简单的区块链题目</title>
<link href="https://hitcxy.com/2020/easy-blockchains/"/>
<id>https://hitcxy.com/2020/easy-blockchains/</id>
<published>2020-06-01T11:53:31.000Z</published>
<updated>2020-10-13T13:14:36.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>不经意间看到的一个题目,就随便做了一下</li>
<li>大佬勿喷</li>
<li>合约地址:<code>0x496371aF69612e7C85F8a558f9f19E0c15E9d4B0 @ ropsten, payforflag(string memory b64email)</code></li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="Blockchain" scheme="https://hitcxy.com/tags/Blockchain/"/>
</entry>
<entry>
<title>Balsn CTF 2019 - Bank</title>
<link href="https://hitcxy.com/2020/balsn2019-bank/"/>
<id>https://hitcxy.com/2020/balsn2019-bank/</id>
<published>2020-05-29T10:51:14.000Z</published>
<updated>2023-06-23T09:21:46.738Z</updated>
<summary type="html">
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/balsn2019_bank/2.png" alt></p>
<p><strong>前言</strong></p>
<ul>
<li>复现 <code>balsn2019 ctf</code> 中的 <code>bank</code> 区块链题目</li>
<li><code>wtcl</code> ,复现了一个下午</li>
<li>具体分析及官方 <code>WP</code> 如下: <a href="https://x9453.github.io/2020/01/16/Balsn-CTF-2019-Bank/" rel="external nofollow noopener noreferrer" target="_blank">https://x9453.github.io/2020/01/16/Balsn-CTF-2019-Bank/</a></li>
<li>复现地址为: <code>ropsten@0x85B0446Dc5B5f32cbB674Dc8e49Fc27Ebaff2Ee2</code></li>
<li>外部账户地址为: <code>0x785a8D0d84ad29c96f8e1F26BfDb3E6CB72cAe9b</code></li>
</ul>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="balsn2019" scheme="https://hitcxy.com/tags/balsn2019/"/>
<category term="bank" scheme="https://hitcxy.com/tags/bank/"/>
</entry>
<entry>
<title>djJyYXk=(b64)伪装 + 宝塔 + typecho</title>
<link href="https://hitcxy.com/2020/Typecho-V2ray/"/>
<id>https://hitcxy.com/2020/Typecho-V2ray/</id>
<published>2020-05-28T15:35:25.000Z</published>
<updated>2020-09-25T15:00:32.000Z</updated>
<summary type="html">
<p><strong>前言</strong></p>
<ul>
<li>换个动态博客 <code>typecho</code> </li>
<li>为了省钱,在同一个 <code>vps</code> 上搭建了 <code>djJyYXk=</code> 和 <code>typecho</code></li>
<li>由于之前摸索搭建的方法,中间走了很多曲折路,由于申请太多 <code>ssl</code> 证书,导致域名暂时被 <code>Let&#39;s Encrypt</code> 拉入黑名单,所以目前没法更换到 <code>typecho</code> ,先记录一下方法吧</li>
</ul>
</summary>
<category term="tools" scheme="https://hitcxy.com/categories/tools/"/>
<category term="djJyYXk=" scheme="https://hitcxy.com/tags/djJyYXk/"/>
<category term="宝塔" scheme="https://hitcxy.com/tags/%E5%AE%9D%E5%A1%94/"/>
<category term="typecho" scheme="https://hitcxy.com/tags/typecho/"/>
</entry>
<entry>
<title>Balsn CTF 2019 - Creativity</title>
<link href="https://hitcxy.com/2020/balsn2019-create2/"/>
<id>https://hitcxy.com/2020/balsn2019-create2/</id>
<published>2020-05-28T14:36:15.000Z</published>
<updated>2021-03-14T01:41:24.000Z</updated>
<summary type="html">
<p><img src="https://blog-1252762426.cos.ap-beijing.myqcloud.com/blog/balsn2019_create2/5.png" alt></p>
<p><strong>前言</strong></p>
<ul>
<li>复现 <code>balsn2019 ctf</code> 中的 <code>Creativity</code> 区块链题目</li>
<li>这道题其实早就想复现了,只不过一直没有复现成功,是有关 <code>create2</code> 的骚操作,基本操作可参考另外一片文章<a href="https://hitcxy.com/2020/Create2/">https://hitcxy.com/2020/Create2/</a></li>
<li>具体分析及官方 <code>WP</code> 如下: <a href="https://x9453.github.io/2020/01/04/Balsn-CTF-2019-Creativity/" rel="external nofollow noopener noreferrer" target="_blank">https://x9453.github.io/2020/01/04/Balsn-CTF-2019-Creativity/</a></li>
<li>原谅我菜的抠脚…都 <code>2020</code> 了,还在做 <code>2019</code> 的题目</li>
<li>复现地址为: <code>ropsten@0x3975c105e8D582A324F6093E7471fDf9d5b9Fa67</code>
</summary>
<category term="Solidity" scheme="https://hitcxy.com/categories/Solidity/"/>
<category term="balsn2019" scheme="https://hitcxy.com/tags/balsn2019/"/>