{"id":3295,"date":"2025-04-11T03:12:42","date_gmt":"2025-04-10T18:12:42","guid":{"rendered":"https:\/\/h4ck.kr\/?p=3295"},"modified":"2025-04-11T03:12:44","modified_gmt":"2025-04-10T18:12:44","slug":"%ec%8b%a4%eb%a6%ac%ec%bd%98-%eb%a7%a5-%ed%99%98%ea%b2%bd%ec%97%90%ec%84%9c-ctf-%ed%99%98%ea%b2%bd-%ea%b5%ac%ec%b6%95","status":"publish","type":"post","link":"https:\/\/h4ck.kr\/?p=3295","title":{"rendered":"\uc2e4\ub9ac\ucf58 \ub9e5 \ud658\uacbd\uc5d0\uc11c CTF \ud658\uacbd \uad6c\ucd95"},"content":{"rendered":"\n<p>\uc2e4\ub9ac\ucf58 \ub9e5\uc5d0\uc11c\ub294 \uc544\ud0a4\ud14d\ucc98\uac00 \ub2ec\ub77c\uc11c amd64 \ud658\uacbd\uc744 \uad6c\ucd95\ud574\uc11c \ub514\ubc84\uae45\ud558\uae30 \uae4c\ub2e4\ub86d\ub2e4.<\/p>\n\n\n\n<p>qemu \uae30\ubc18\uc73c\ub85c\ud55c colima\ub77c\ub294 \ub3c4\ucee4 \ub7f0\ud0c0\uc784\uc744 \uc0ac\uc6a9\ud558\ub294 \ubc29\ubc95\uc774 \uc788\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">colima \ub3c4\ucee4 \ub7f0\ud0c0\uc784 \uad6c\ucd95<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. colima \uc124\uce58<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">brew install docker\nbrew install colima\nbrew install docker-buildx<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">2. \u201cx64\u201d\uc774\ub984\uc73c\ub85c 64\uae30\uac00 \ub514\uc2a4\ud06c, 8\ucf54\uc5b4, 4\uae30\uac00 \ub7a8\uc73c\ub85c qemu \uae30\ubc18 VM \uc124\uc815\ud574\uc11c \uc2dc\uc791<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">colima start -p x64 -a x86_64 -c 8 -m 4 -d 64 --vm-type qemu<\/pre>\n\n\n\n<p>2-1. \uc81c\uac70<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">colima delete x64<\/pre>\n\n\n\n<p>2-2. \uba48\ucd94\uae30<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">colima stop x64<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">3. colima\ub85c \ub3c4\ucee4 \ub7f0\ud0c0\uc784 \ubcc0\uacbd\ub410\ub294\uc9c0 \ud655\uc778<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">docker context ls<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">4. AMD64 \uc544\ud0a4\ud14d\ucc98\uc758 Ubuntu 24\ubc84\uc804 \ucee8\ud14c\uc774\ub108 \uc0dd\uc131 \ubc0f \uc2e4\ud589, \u201cubutun22\u201d \uc774\ub984\uc73c\ub85c \uc0dd\uc131<\/h3>\n\n\n\n<p>\ub2e4\uc74c \ucee8\ud14c\uc774\ub108\uc758 \ud3ec\ud2b8\ub97c \ud638\uc2a4\ud2b8\uc758 \ud3ec\ud2b8\ub85c \ud3ec\uc6cc\ub529<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\ucee8\ud14c\uc774\ub108 \ud3ec\ud2b8 -> \ud638\uc2a4\ud2b8 \ud3ec\ud2b8 \ud3ec\uc6cc\ub529<\/li>\n\n\n\n<li>80 -> 8000<\/li>\n\n\n\n<li>1234 -> 12345<\/li>\n\n\n\n<li>8000 -> 18000<\/li>\n\n\n\n<li>8001 -> 18001<\/li>\n\n\n\n<li>8002 -> 18002<\/li>\n<\/ul>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">docker run -it --platform linux\/amd64 \\\n  --cap-add=SYS_PTRACE \\\n  --security-opt seccomp=unconfined \\\n  --security-opt apparmor=unconfined \\\n  -p 22222:22 -p 8000:80 -p 12345:1234 -p 18000:8000 -p 18001:8001 -p 18002:8002 \\\n  --name ubuntu22 ubuntu:22.04<\/pre>\n\n\n\n<ol class=\"wp-block-list\">\n<li>ubuntu22 \ucee8\ud14c\uc774\ub108 \uc2dc\uc791\/\uc885\ub8cc<\/li>\n<\/ol>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">docker start ubuntu22\ndocker stop ubuntu22<\/pre>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\uc258 \uc9c4\uc785<\/li>\n<\/ol>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">docker exec -it ubuntu22 bash<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">samba \uc138\ud305<\/h2>\n\n\n\n<p>\ub9e5\uc5d0\uc11c \uc708\ub3c4\uc6b0 winscp \ub300\uc2e0 \uc5ed\ud560\ud558\uae30 \uc704\ud574 \uc138\ud305.<\/p>\n\n\n\n<p>vscode\uc5d0\uc11c \uc27d\uac8c \ucf54\ub4dc \uc218\uc815\ud558\uae30 \uc704\ud568.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. samba \uc124\uce58<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">sudo apt install -y samba<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">2. \u201cubuntu\u201d \uc774\ub984\uc744 \uac00\uc9c4 samba \uacc4\uc815 \uc0dd\uc131<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">sudo smbpasswd -a ubuntu<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">3. samba \ud3ec\ud2b8 \uc218\uc815 \ubc0f \uacf5\uc720 \ud3f4\ub354 \uc9c0\uc815<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">sudo nano \/etc\/samba\/smb.conf<\/pre>\n\n\n\n<p>[\ub0b4\uc6a9]<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">[global]\nsmb ports = 8001\n\n(...)\n\n[ubuntu]\ncomment = samba shared directory\npath = \/home\/ubuntu\nread only = no\nwritable = yes\nguest ok = no\nvalid user = ubuntu\ncreate mask = 0777\ndirectory mask = 0777<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Dobby \ud6c4\ud0b9 \ud504\ub808\uc784\uc6cc\ud06c \uc124\uce58\/\uc138\ud305<\/h2>\n\n\n\n<p>\ubc14\uc774\ub108\ub9ac\uc5d0\uc11c \uc5b4\uc148\ube14\ub9ac\uc5b4 \uc2e4\ud589 \uc911\uc5d0 \ub808\uc9c0\uc2a4\ud130 \ud6c4\ud06c\ud560\ub54c \uc720\uc6a9, \ub610\ud55c \ub2e4\uc591\ud55c OS \uc9c0\uc6d0<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. git clone<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">git clone https:\/\/github.com\/jmpews\/Dobby.git<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">2. \uc61b\ub0a0 \ubc84\uc804\uc73c\ub85c \ub418\ub3cc\ub9ac\uae30<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">cd Dobby\ngit checkout d353eea7594d1ac85db84065aeb4d1300d9f3248<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">3. \uc18c\uc2a4\ucf54\ub4dc \uc218\uc815 (<a href=\"https:\/\/github.com\/jmpews\/Dobby\/issues\/202\">https:\/\/github.com\/jmpews\/Dobby\/issues\/202<\/a>)<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">nano ~\/Dobby\/source\/MemoryAllocator\/NearMemoryAllocator.cc<\/pre>\n\n\n\n<p>MemBlock <em>NearMemoryAllocator::allocateNearBlockFromUnusedRegion, MemBlock<\/em> NearMemoryAllocator::allocateNearBlockFromUnusedRegion \ud568\uc218\uc5d0 \uc788\ub294 \ucf54\ub4dc \uc218\uc815.<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">min_valid_addr = pos - search_range;  \/\/ if pos &lt; search_range, and min_valid_addr will be a large value,this maybe a bug\nmax_valid_addr = pos + search_range;<\/pre>\n\n\n\n<p>\uc774 \ub2e4\uc74c\uc5d0<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">min_valid_addr = pos >= search_range ? (pos - search_range) : 0;<\/pre>\n\n\n\n<p>\ub0b4\uc6a9 \ucd94\uac00<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Dobby \ube4c\ub4dc \/ \uc124\uce58<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">mkdir build_for_host &amp;&amp; cd build_for_host\ncmake ..\nmake -j8\nsudo cp libdobby.so \/usr\/local\/lib\nsudo ldconfig\nsudo cp ~\/Dobby\/include\/dobby.h \/usr\/local\/include<\/pre>\n\n\n\n<p>==============================================<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\uae30\uc874 \ucee8\ud14c\uc774\ub108 \uc720\uc9c0\ud55c\ucc44 \ucd94\uac00 \uc635\uc158\uc744 \ub123\uc5b4 \ubc18\uc601\ud558\ub824\uba74?<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. \uae30\uc874 \ucee8\ud14c\uc774\ub108\ub97c \uc774\ubbf8\uc9c0\ub85c \uc800\uc7a5<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">docker commit ubuntu22 ubuntu22_2<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">2. \uc0c8\ub85c\uc6b4 \uc635\uc158\uc744 \uc54c\uc544\uc11c \uc798\u2026. \uc801\uc6a9\ud558\uc5ec \uc0c8 \ucee8\ud14c\uc774\ub108 \uc2e4\ud589<\/h3>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\" data-enlighter-theme=\"dracula\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">docker run -it --platform linux\/amd64 \\\n  --cap-add=SYS_PTRACE \\\n  --security-opt seccomp=unconfined \\\n  --security-opt apparmor=unconfined \\\n  -p 22222:22 -p 8000:80 -p 12345:1234 -p 18000:8000 -p 18001:8001 -p 18002:8002 \\\n  --name ubuntu22_2 ubuntu22_2<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>\uc2e4\ub9ac\ucf58 \ub9e5\uc5d0\uc11c\ub294 \uc544\ud0a4\ud14d\ucc98\uac00 \ub2ec\ub77c\uc11c amd64 \ud658\uacbd\uc744 \uad6c\ucd95\ud574\uc11c \ub514\ubc84\uae45\ud558\uae30 \uae4c\ub2e4\ub86d\ub2e4. qemu \uae30\ubc18\uc73c\ub85c\ud55c colima\ub77c\ub294 \ub3c4\ucee4 \ub7f0\ud0c0\uc784\uc744 \uc0ac\uc6a9\ud558\ub294 \ubc29\ubc95\uc774 \uc788\ub2e4. colima \ub3c4\ucee4 \ub7f0\ud0c0\uc784 \uad6c\ucd95 1. colima \uc124\uce58 2. \u201cx64\u201d\uc774\ub984\uc73c\ub85c 64\uae30\uac00 \ub514\uc2a4\ud06c, 8\ucf54\uc5b4, 4\uae30\uac00 \ub7a8\uc73c\ub85c qemu \uae30\ubc18 VM \uc124\uc815\ud574\uc11c \uc2dc\uc791 2-1. \uc81c\uac70 2-2. \uba48\ucd94\uae30 3. colima\ub85c \ub3c4\ucee4 \ub7f0\ud0c0\uc784 \ubcc0\uacbd\ub410\ub294\uc9c0 \ud655\uc778 4. AMD64 \uc544\ud0a4\ud14d\ucc98\uc758 Ubuntu 24\ubc84\uc804 \ucee8\ud14c\uc774\ub108 \uc0dd\uc131 \ubc0f \uc2e4\ud589,&hellip;&nbsp;<a href=\"https:\/\/h4ck.kr\/?p=3295\" rel=\"bookmark\">\ub354 \ubcf4\uae30 &raquo;<span class=\"screen-reader-text\">\uc2e4\ub9ac\ucf58 \ub9e5 \ud658\uacbd\uc5d0\uc11c CTF \ud658\uacbd \uad6c\ucd95<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"categories":[19],"tags":[13],"class_list":["post-3295","post","type-post","status-publish","format-standard","hentry","category-ctf-private","tag-macos"],"_links":{"self":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/3295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3295"}],"version-history":[{"count":1,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/3295\/revisions"}],"predecessor-version":[{"id":3296,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/3295\/revisions\/3296"}],"wp:attachment":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}