{"description":"\u306f\u3058\u3081\u306b \u4e00\u4ebawriteup advent calendar\u306e6\u65e5\u76ee\u3067\u3059\u3002 1\u65e51\u554f\u5206\u306ewriteup\u3092\u76ee\u6a19\u306b\u9811\u5f35\u3063\u3066\u3044\u304d\u307e\u3059\u3002 6\u65e5\u76ee\u306e\u554f\u984c\u306f\u30010CTF 2017 Finals\u3067\u51fa\u984c\u3055\u308c\u305f\u300ccred_jar\u300d\u3002 race condition\u3092\u8d77\u70b9\u3068\u3057\u305fkernel exploit\u554f\u984c\u3067\u521d\u3081\u3066\u306e\u4eba\u306b\u30aa\u30b9\u30b9\u30e1\u3067\u3059\u3002 \u30ab\u30fc\u30cd\u30eb\u306e\u60c5\u5831 (\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u69cb\u306a\u3069) \u30ab\u30fc\u30cd\u30eb\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u304c4.12\u3067\u3001smep, kaslr\u304c\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u3002 kernel exploit\u3067\u3088\u304f\u4f7f\u308f\u308c\u308b/dev/ptmx\u304c\u5b58\u5728\u3057\u306a\u3044\u3002 % cat boot.sh #!/bin/bash qemu-system-x86_64\u2026","published":"2018-12-06 00:00:00","image_url":"https://cdn-ak.f.st-hatena.com/images/fotolife/h/hama7230/20181205/20181205190753.jpg","title":"0CTF 2017 Finals cred_jar writeup","version":"1.0","type":"rich","provider_url":"https://hatena.blog","provider_name":"Hatena Blog","author_url":"https://blog.hatena.ne.jp/hama7230/","author_name":"hama7230","width":"100%","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fhama.hatenadiary.jp%2Fentry%2F2018%2F12%2F06%2F000000\" title=\"0CTF 2017 Finals cred_jar writeup - \u30d6\u30ed\u30b0\u672a\u6e80\u306e\u306a\u306b\u304b\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","height":"190","categories":[],"blog_title":"\u30d6\u30ed\u30b0\u672a\u6e80\u306e\u306a\u306b\u304b","blog_url":"https://hama.hatenadiary.jp/","url":"https://hama.hatenadiary.jp/entry/2018/12/06/000000"}