2015/10/28

五年養成計畫

我現在都已經讀到大學四年級了

開始要找實習的時候才發覺到自己的履歷看起來一點都不亮眼

拜讀了這位大神的部落格後決定要開始振作

http://lucida.me/blog/on-learning-algorithms/

以前大學總是渾渾噩噩的

什麼東西都是東摸西摸

覺得拿個及格分數就很滿意了

從現在大學四年級開始到碩一再加上三年的研替

總共五年的時間能夠重整一下自己的基礎

以下是書單(會不定時的更新):

程式設計師的自我修養

http://www.books.com.tw/products/0010456858

Trace QIRA(1)-directory tree and package

Some tools

sourcetree ( https://www.sourcetreeapp.com/ )
git cola ( https://git-cola.github.io/ )

Installation

Now version is v1.1
install.sh will install qira
qemu_build.sh will install qemu
fetchlibs.sh will fetch the libraries for i386, armhf, armel, aarch64, mips, mipsel, and ppc
pin_build.sh will install the QIRA PIN plugin, allowing –pin to work

Debian Packages

build-essential : essential to build Debian packages
python-dev python-pip : Python
debootstrap : a tool which will install a Debian base system into a subdirectory of another
debian-archive-keyring : key for GnuPG
libjpeg-dev : C library for reading and writing JPEG images
zlib1g-dev : zlib is a library implementing the deflate compression method found in gzip and PKZIP
unzip : tool to decompress zip file
wget : network utility to retrieve files from the Web using http and ftp
graphviz : Graph visualization is a way of representing structural information as diagrams of abstract graphs and networks.
curl : command line tool for transferring files with URL syntax
Capstone : disassembly framework
Virtualenv : tool to create isolated Python environments

Python Packages

Six : Python 2 and 3 Compatibility Library
html : simple, elegant HTML, XHTML and XML generation
flask-socketio : Flask applications access to low latency bi-directional communications between the clients and the server
pillow : Python Imaging Library
pyelftools : Library for analyzing ELF files and DWARF debugging information
socketIO-client : socket.io client library for Python
Pydot : full interface to create handle modify and process graphs in Graphviz’s dot language
Ipaddr : library for working with IP addresses
Capstone : disassembly framework
Hexdump : view/edit your binary with any text editor
Nose : nose extends unittest to make testing easier
./qiradb : geohot’s python module

Language used

I use cloc to calculate code.

http://cloc.sourceforge.net/

cloc

Mainly use C, Python, Javascript
C is used to qemu and disassemble
Python is for the website
Web framework use flask
Flask is a microframework for Python based on Werkzeug, Jinja 2 and good intentions

http://flask.pocoo.org/

Website use Flask-SocketIO to communicate
Flask-SocketIO gives Flask applications access to low latency bi-directional communications between the clients and the server.
Client-side application can use javascript library to establish a permanet connection to the server

http://flask-socketio.readthedocs.org/en/latest/

Directory Tree

extra
- qiradb
- website(qira.me)
ida
- Ida plugin
middleware
- 主要放置.py
qiradb
- 以C++寫成的資料結構
qira_tests
- Test case
releases
- qira各版本
static2
- recovering static structure
tests_auto
- auto tests
tests_manual
- tests manual
tracers
- pin
- angr
- qemu
web
- Web application client
- Css js

QIRA introduction

image from qira.me website

QIRA is timeless debugger
Fullname is QEMU Interactive Runtime Analyser
QIRA was initially developed at Google by George Hotz. Work continues at CMU.

QIRA website :

http://qira.me/

QIRA github :

https://github.com/BinaryAnalysisPlatform/qira

Usage

How to make ida plugin work

Testing environment is on Windows 10 enterprise with Vmware workstation Pro 12
Install qira 1.1 on Ubuntu 15.10 and port-forwarding 3002 port
Quick install qira and google-chrome can by following script

- git clone https://github.com/bananaappletw/Ubuntu
cd Ubuntu/
./install.sh

And copy two files qira_ida66_windows.p64, qira_ida66_windows.plw from qira/ida/bin/ to ida pro plugins/
Open Chrome and IDA PRO on windows 10
It should work like this

ida plugin

2015/09/17

CTF For Beginner

HITCON Community 2015演講的投影片

主題 : CTF For Beginner

要是有興趣的歡迎加入Bamboofox喔

Bamboofox網站

網路安全策進會

Ctf For Beginner from 威伯陳

2015/09/14

Ubuntu-For-CTF

My config

https://github.com/bananaappletw/Ubuntu

Update everything

sudo apt-get update
sudo apt-get -y upgrade

Install google-chrome

wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | sudo apt-key add -
sudo sh -c 'echo "deb http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google-chrome.list'
sudo apt-get update
sudo apt-get install -y google-chrome-stable

Install multi architecture

dpkg --add-architecture i386
sudo apt-get update
sudo apt-get install -y gcc-multilib

Install strace, ltrace, gdb64

sudo apt-get install -y strace
sudo apt-get install -y ltrace
sudo apt-get install -y gdb64

Install pip

sudo apt-get install python-setuptools
sudo apt-get install easy_install
sudo easy_install pip
sudo pip install pwntools
sudo pip install capstone --upgrade
sudo pip install ropgadget --upgrade

vim

sudo apt-get install -y vim
cp .vimrc ~
cp .gitconfig ~
git clone https://github.com/VundleVim/Vundle.vim.git ~/.vim/bundle/Vundle.vim
vim +PluginInstall +qall
wget https://github.com/Lokaltog/powerline/raw/develop/font/PowerlineSymbols.otf https://github.com/Lokaltog/powerline/raw/develop/font/10-powerline-symbols.conf
sudo mv PowerlineSymbols.otf /usr/share/fonts/
sudo fc-cache -vf
sudo mv 10-powerline-symbols.conf /etc/fonts/conf.d/

Install qira

cd ~/
cd ~/ && wget -qO- qira.me/dl | unxz | tar x && cd qira && ./install.sh
./fetchlibs.sh 
./pin_build.sh
./cda_build.sh

2015/10/28

Some tools

Installation

Debian Packages

Python Packages

Language used

Directory Tree

QIRA website :

QIRA github :

Usage

How to make ida plugin work

2015/09/17

HITCON Community 2015演講的投影片

主題 : CTF For Beginner

要是有興趣的歡迎加入Bamboofox喔

2015/09/14

My config

Update everything

Install google-chrome

Install multi architecture

Install strace, ltrace, gdb64

Install pip

vim

Install qira

All types

hackerrank

CTF

Bamboofox

Secure programming

W3challs

pwnable.kr

hackthissite

Blogger

Stackedit

Slides

Prezi

Slides

Ascii graph

Speak

sm

CTF

Convert hex string

qira

python

python package