ctf-pwn
实战向技巧与工具列表齐全，适合CTF与漏洞复现者。
包含利用与内存操作技术，可能用于违法入侵，请仅在授权场景使用。
二进制利用技术速查，涵盖溢出、ROP、格式化等攻击套路。
给出现成漏洞但还没能做出利用链时用的一套实战方法论，包含缓冲区溢出、格式化漏洞、堆漏洞、ROP、ret2libc、shellcode、内核利用等套路。适合你已经定位到内存或低级漏洞、需要把漏洞变成代码执行或提权的场景。特点是把常见利用原语、构造思路和常用工具（如 pwntools、ROP 工具）整理成可复用的步骤和提示。
▸ 展开 SKILL.md 英文原文
Provides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to turn memory corruption or low-level primitives into code execution or privilege escalation, such as buffer overflows, format strings, heap bugs, ROP, ret2libc, shellcode, kernel exploitation, seccomp bypass, sandbox escape, or Windows/Linux exploit chains. Do not use it when the main blocker is understanding what the binary does; use reverse engineering first. Do not use it for pure web bugs, disk or packet forensics, or standalone crypto/math challenges.
帮我安装这个 skill：https://raw.githubusercontent.com/OpenAisec/Miko/main/data/skills/ctf-pwn/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/OpenAisec/Miko/main/data/skills/ctf-pwn/SKILL.md"# CTF Binary Exploitation (Pwn) Quick reference for binary exploitation (pwn) CTF challenges. Each technique has a one-liner here; see supporting files for full details. ## Prerequisites **Python packages (all platforms):** ```bash pip install pwntools ropper ROPgadget ``` **Linux (apt):** ```bash apt install gdb binutils strace ltrace qemu-system-x86 ``` **macOS (Homebrew):** ```bash brew install gdb binutils qemu ``` **Ruby gems (all platforms):** ```bash gem install one_gadget seccomp-tools ``` **Manual install:** - pwndbg — Linux: [GitHub](https://github.com/pwndbg/pwndbg), macOS: `brew install pwndbg/tap/pwndbg-gdb` - checksec — included with pwntools ## Additional Resources -