ctfshow wp

ctfshow 签退 wp

pyc文件，直接用pyinstxtractor 得到py # Source Generated with Decompyle++ # File: re3.pyc (Python 2.7) import string c_charset = string.ascii_uppercase + stri

ctfshow flag白给 wp

脱壳 upx -d flag.exe -o a.exe IDA打开 GUI文件得找交互 我们发现了 TForm1Button1Click 应该是点击下边那个检查按钮的 _DWORD *__fastcall TForm1_Button1Click(int a1) { int v1; // edx

ctfshow re2 wp

int __cdecl main_0(int argc, const char **argv, const char **envp) { char v4; // [esp+0h] [ebp-44Ch] char v5; // [esp+0h] [ebp-44Ch] char v6; //

ctfshow re3 wp

DIE分析 直接生成伪代码 int __fastcall main(int argc, const char **argv, const char **envp) { size_t v3; // rax int v0; // [rsp+Ch] [rbp-134h] BYREF unsig