ctf-pwn
面向实战的利用套路与工具链，适合攻防选手快速上手。
包含可用于攻击的利用技术，应仅在授权环境中使用。
CTF二进制利用技巧与工作流（溢出、ROP、ret2libc等）。
能把内存错乱、溢出或底层漏洞变成可用的代码执行或提权方案，适合做 CTF pwn 类型的二进制利用。用在你已经有可利用的本地程序或服务、需要把内存读写/覆盖等原语拼成 ROP、ret2libc、shellcode 或内核绕过等利用链时。特点是覆盖从栈溢出、格式化字符串到堆、seccomp 和 sandbox 绕过的实战技巧与工作流，不适合还在理解二进制逻辑时使用。
▸ 展开 SKILL.md 英文原文
Provides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to turn memory corruption or low-level primitives into code execution or privilege escalation, such as buffer overflows, format strings, heap bugs, ROP, ret2libc, shellcode, kernel exploitation, seccomp bypass, sandbox escape, or Windows/Linux exploit chains. Do not use it when the main blocker is understanding what the binary does; use reverse engineering first. Do not use it for pure web bugs, disk or packet forensics, or standalone crypto/math challenges.
帮我安装这个 skill：https://raw.githubusercontent.com/ljagiello/ctf-skills/main/ctf-pwn/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/ljagiello/ctf-skills/main/ctf-pwn/SKILL.md"# CTF Binary Exploitation (Pwn) Quick reference for binary exploitation (pwn) CTF challenges. Each technique has a one-liner here; see supporting files for full details. ## Prerequisites **Python packages (all platforms):** ```bash pip install pwntools ropper ROPgadget ``` **Linux (apt):** ```bash apt install gdb binutils strace ltrace qemu-system-x86 ``` **macOS (Homebrew):** ```bash brew install gdb binutils qemu ``` **Ruby gems (all platforms):** ```bash gem install one_gadget seccomp-tools ``` **Manual install:** - pwndbg — Linux: [GitHub](https://github.com/pwndbg/pwndbg), macOS: `brew install pwndbg/tap/pwndbg-gdb` - checksec — included with pwntools ## Additional Resources -