-
Notifications
You must be signed in to change notification settings - Fork 705
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
135 changed files
with
438 additions
and
466 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Empty file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,36 +1,36 @@ | ||
| # 第一章 基础知识篇 | ||
|
|
||
| - [1.1 CTF 简介](1.1_ctf.md) | ||
| - [1.2 学习方法](1.2_how_to_learn.md) | ||
| - [1.3 Linux 基础](1.3_linux_basic.md) | ||
| - [1.4 Web 安全基础](1.4_web_basic.md) | ||
| - [1.4.1 HTML 基础](1.4.1_html_basic.md) | ||
| - [1.4.2 HTTP 协议基础](1.4.2_http_basic.md) | ||
| - [1.4.3 JavaScript 基础](1.4.3_javascript_basic.md) | ||
| - [1.4.4 常见 Web 服务器基础](1.4.4_webserver_basic.md) | ||
| - [1.4.5 OWASP Top Ten Project 漏洞基础](1.4.5_owasp_basic.md) | ||
| - [1.4.6 PHP 源码审计基础](1.4.6_php_basic.md) | ||
| - [1.5 逆向工程基础](1.5_reverse_basic.md) | ||
| - [1.5.1 C 语言基础](1.5.1_c_basic.md) | ||
| - [1.5.2 x86/x86-64 汇编基础](1.5.2_x86&x64.md) | ||
| - [1.5.3 Linux ELF](1.5.3_elf.md) | ||
| - [1.5.4 Windows PE](1.5.4_pe.md) | ||
| - [1.5.5 静态链接](1.5.5_static_link.md) | ||
| - [1.5.6 动态链接](1.5.6_dynamic_link.md) | ||
| - [1.5.7 内存管理](1.5.7_memory.md) | ||
| - [1.5.8 glibc malloc](1.5.8_glibc_malloc.md) | ||
| - [1.5.9 Linux 内核](1.5.9_linux_kernel.md) | ||
| - [1.5.10 Windows 内核](1.5.10_windows_kernel.md) | ||
| - [1.6 密码学基础](1.6_crypto_basic.md) | ||
| - [1.6.1 初等数论](1.6.1_number_theory.md) | ||
| - [1.6.2 近世代数](1.6.2_modern_algebra.md) | ||
| - [1.6.3 流密码](1.6.3_stream_cipher.md) | ||
| - [1.6.4 分组密码](1.6.4_block_cipher.md) | ||
| - [1.6.5 公钥密码](1.6.5_public-key_crypto.md) | ||
| - [1.6.6 哈希函数](1.6.6_hash.md) | ||
| - [1.6.7 数字签名](1.6.7_digital_signature.md) | ||
| - [1.7 Android 安全基础](1.7_android_basic.md) | ||
| - [1.7.1 Android 环境搭建](1.7.1_android_env.md) | ||
| - [1.7.2 Dalvik 指令集](1.7.2_dalvik.md) | ||
| - [1.7.3 ARM 汇编基础](1.7.3_arm.md) | ||
| - [1.7.4 Android 常用工具](1.7.4_android_tools.md) | ||
| * [1.1 CTF 简介](1.1_ctf.md) | ||
| * [1.2 学习方法](1.2_how_to_learn.md) | ||
| * [1.3 Linux 基础](1.3_linux_basic.md) | ||
| * [1.4 Web 安全基础](1.4_web_basic.md) | ||
| * [1.4.1 HTML 基础](1.4.1_html_basic.md) | ||
| * [1.4.2 HTTP 协议基础](1.4.2_http_basic.md) | ||
| * [1.4.3 JavaScript 基础](1.4.3_javascript_basic.md) | ||
| * [1.4.4 常见 Web 服务器基础](1.4.4_webserver_basic.md) | ||
| * [1.4.5 OWASP Top Ten Project 漏洞基础](1.4.5_owasp_basic.md) | ||
| * [1.4.6 PHP 源码审计基础](1.4.6_php_basic.md) | ||
| * [1.5 逆向工程基础](1.5_reverse_basic.md) | ||
| * [1.5.1 C 语言基础](1.5.1_c_basic.md) | ||
| * [1.5.2 x86/x86-64 汇编基础](1.5.2_x86&x64.md) | ||
| * [1.5.3 Linux ELF](1.5.3_elf.md) | ||
| * [1.5.4 Windows PE](1.5.4_pe.md) | ||
| * [1.5.5 静态链接](1.5.5_static_link.md) | ||
| * [1.5.6 动态链接](1.5.6_dynamic_link.md) | ||
| * [1.5.7 内存管理](1.5.7_memory.md) | ||
| * [1.5.8 glibc malloc](1.5.8_glibc_malloc.md) | ||
| * [1.5.9 Linux 内核](1.5.9_linux_kernel.md) | ||
| * [1.5.10 Windows 内核](1.5.10_windows_kernel.md) | ||
| * [1.6 密码学基础](1.6_crypto_basic.md) | ||
| * [1.6.1 初等数论](1.6.1_number_theory.md) | ||
| * [1.6.2 近世代数](1.6.2_modern_algebra.md) | ||
| * [1.6.3 流密码](1.6.3_stream_cipher.md) | ||
| * [1.6.4 分组密码](1.6.4_block_cipher.md) | ||
| * [1.6.5 公钥密码](1.6.5_public-key_crypto.md) | ||
| * [1.6.6 哈希函数](1.6.6_hash.md) | ||
| * [1.6.7 数字签名](1.6.7_digital_signature.md) | ||
| * [1.7 Android 安全基础](1.7_android_basic.md) | ||
| * [1.7.1 Android 环境搭建](1.7.1_android_env.md) | ||
| * [1.7.2 Dalvik 指令集](1.7.2_dalvik.md) | ||
| * [1.7.3 ARM 汇编基础](1.7.3_arm.md) | ||
| * [1.7.4 Android 常用工具](1.7.4_android_tools.md) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,99 @@ | ||
| # 2.1.1 VirtualBox | ||
|
|
||
| - [虚拟化环境](#虚拟化环境) | ||
| - [硬件虚拟化环境](#硬件虚拟化环境) | ||
| - [物理机 Manjaro 17.02](#物理机-manjaro-1702) | ||
| - [Windows 虚拟机](#windows-虚拟机) | ||
| - [Linux 虚拟机](#linux-虚拟机) | ||
| - [工具安装脚本](#工具安装脚本) | ||
|
|
||
|
|
||
| ## 虚拟化环境 | ||
| 虚拟化是资源的抽象化，是单一物理资源的多个逻辑表示，具有兼容性、隔离的优良特性。 | ||
|
|
||
| 在恶意代码和漏洞分析过程中常常需要使用虚拟化技术来进行辅助，这不仅可以保护真实的物理设备环境不被恶意代码攻击，还能够固化保存分析环境以提高工作效率，同时还能够在不影响程序执行流的情况下动态捕获程序内存、CPU 等关键数据。 | ||
|
|
||
| 虚拟化技术根据实现技术的不同可以分为： | ||
| - 软件虚拟化：用纯软件的方法在现有平台上实现对物理资源访问的截获和模拟。如 QEMU。 | ||
| - 硬件虚拟化：由硬件平台对特殊指令进行截获和重定向，交由虚拟机监控器（VMM）进行处理，这需要 CPU、主板、BIOS 和软件的支持。如 VMWare、VirtualBox。 | ||
|
|
||
| 虚拟化技术根据是否改动操作系统又可以分为： | ||
| - 半虚拟化：通过修改开源操作系统，将虚拟机特殊指令的被动截获请求转化成客户机操作系统的主动通知以提高性能。如 Xen。 | ||
| - 全虚拟化：不需要对操作系统进行改动，提供了完整的包括处理器、内存和外设的虚拟化平台。如 VMWare、VirtualBox、 | ||
|
|
||
|
|
||
| ## 硬件虚拟化环境 | ||
| 用硬件虚拟机的话比较简单，可以自己下载安装。下面是我个人的一些环境配置。 | ||
|
|
||
| - VirtualBox(https://www.virtualbox.org/) | ||
| - VMware Workstation/Player(https://www.vmware.com/) | ||
|
|
||
| #### 物理机 Manjaro 17.02 | ||
| Manjaro 17.02 x86-64(https://manjaro.org/) with BlackArch tools. | ||
| ```text | ||
| $ uname -a | ||
| Linux firmy-pc 4.9.43-1-MANJARO #1 SMP PREEMPT Sun Aug 13 20:28:47 UTC 2017 x86_64 GNU/Linux | ||
| ``` | ||
| ```text | ||
| yaourt -Rscn: | ||
| skanlite cantata kdenlive konversation libreoffice-still thunderbird-kde k3b cups | ||
| yaourt -S: | ||
| virtualbox tree git ipython ipython2 gdb google-chrome tcpdump vim wireshark-qt edb ssdeep wps-office strace ltrace metasploit python2-pwntools peda oh-my-zsh-git radare2 binwalk burpsuite checksec netcat wxhexeditor | ||
| pip3/pip2 install: | ||
| r2pipe | ||
| ``` | ||
|
|
||
| #### Windows 虚拟机 | ||
| - 32-bit | ||
| - Windows XP | ||
| - Windows 7 | ||
| - 64-bit | ||
| - Windows 7 | ||
| ```text | ||
| 7-Zip/WinRAR | ||
| IDA_Pro_v6.8 | ||
| 吾爱破解工具包2.0 | ||
| ``` | ||
| - Windows 10 | ||
| 下载地址：http://www.itellyou.cn/ | ||
| #### Linux 虚拟机 | ||
| - 32-bit/64-bit Ubuntu LTS - https://www.ubuntu.com/download | ||
| - 14.04 | ||
| - 16.04 | ||
| ```text | ||
| $ uname -a | ||
| Linux firmyy-VirtualBox 4.10.0-28-generic #32~16.04.2-Ubuntu SMP Thu Jul 20 10:19:13 UTC 2017 i686 i686 i686 GNU/Linux | ||
| ``` | ||
| ```text | ||
| apt-get purge: | ||
| libreoffice-common unity-webapps-common thunderbird totem rhythmbox simple-scan gnome-mahjongg aisleriot gnome-mines cheese transmission-common gnome-orca webbrowser-app gnome-sudoku onboard deja-dup usb-creator-common | ||
| apt-get install: | ||
| git vim tree ipython ipython3 python-pip python3-pip foremost ssdeep zsh | ||
| pip2 install: | ||
| termcolor | ||
| zio | ||
| other install: | ||
| oh my zsh | ||
| peda | ||
| ``` | ||
| - Kali Linux - https://www.kali.org/ | ||
| - BlackArch - https://blackarch.org/ | ||
| - REMnux - https://remnux.org | ||
| #### 工具安装脚本 | ||
| - ctf-tools - https://github.com/zardus/ctf-tools | ||
| - [pwn_env](../src/others/2.1.1_vm/pwn_env.sh) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,4 @@ | ||
| # 2.1.1 QEMU | ||
| # 2.1.2 QEMU | ||
|
|
||
| - [简介](#简介) | ||
| - [安装](#安装) | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| # 2.1.3 Docker |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,4 @@ | ||
| # 5.12 Unicorn 模拟器 | ||
| # 2.1.4 Unicorn 模拟器 | ||
|
|
||
| - [参考资料](#参考资料) | ||
|
|
||
|
|
||
This file was deleted.
Oops, something went wrong.
Oops, something went wrong.