PageSourceSearch

https://3cly.github.io/

html 3cly.github.io collected 2026-10-03 08:31:23 UTC 36,151 bytes, 1,023 lines download raw bytes

1
2
3
4
5<!DOCTYPE html>
6<html lang="zh-CN">
7<head>
8  <meta charset="UTF-8">
9<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2">
10<meta name="theme-color" content="#FFF">
11  <link rel="apple-touch-icon" sizes="180x180" href="/images/apple-touch-icon.png">
12
13<link rel="icon" type="image/ico" sizes="32x32" href="/images/favicon.ico">
14  <meta http-equiv="Cache-Control" content="no-transform">
15  <meta http-equiv="Cache-Control" content="no-siteapp">
16  <meta name="google-site-verification" content="tcK6frO9MMMjv-s9v_SHFiAvsW8YHyINmZlIiYn3a4g" />
17
18
19<link rel="alternate" type="application/rss+xml" title="3clyの博客" href="https://3cly.github.io/rss.xml" />
20<link rel="alternate" type="application/atom+xml" title="3clyの博客" href="https://3cly.github.io/atom.xml" />
21<link rel="alternate" type="application/json" title="3clyの博客" href="https://3cly.github.io/feed.json" />
22
23<link rel="stylesheet" href="//fonts.googleapis.com/css?family=Mulish:300,300italic,400,400italic,700,700italic%7CFredericka%20the%20Great:300,300italic,400,400italic,700,700italic%7CNoto%20Serif%20JP:300,300italic,400,400italic,700,700italic%7CNoto%20Serif%20SC:300,300italic,400,400italic,700,700italic%7CInconsolata:300,300italic,400,400italic,700,700italic&display=swap&subset=latin,latin-ext">
24
25<link rel="stylesheet" href="/css/app.css?v=0.2.5">
26
27  
28  <meta name="keywords" content="java,git,cas" />
29
30
31<link rel="canonical" href="https://3cly.github.io/">
32
33
34
35  <title>静かな港 = 3clyの博客 = 从来如此,便对么?</title>
36<meta name="generator" content="Hexo 6.3.0"></head>
37<body itemscope itemtype="http://schema.org/WebPage">
38  <div id="loading">
39    <div class="cat">
40      <div class="body"></div>
41      <div class="head">
42        <div class="face"></div>
43      </div>
44      <div class="foot">
45        <div class="tummy-end"></div>
46        <div class="bottom"></div>
47        <div class="legs left"></div>
48        <div class="legs right"></div>
49      </div>
50      <div class="paw">
51        <div class="hands left"></div>
52        <div class="hands right"></div>
53      </div>
54    </div>
55  </div>
56  <div id="container">
57    <header id="header" itemscope itemtype="http://schema.org/WPHeader">
58      <div class="inner">
59        <div id="brand">
60          <div class="pjax">
61          
62            <a href="/" class="logo" rel="start"><p class="artboard">静かな港</p>
63              <h1 itemprop="name headline" class="title">3clyの博客</h1>
64            </a>
65            <p class="meta" itemprop="description">= 从来如此,便对么? =</p>
66          
67          </div>
68        </div>
69        <nav id="nav">
70  <div class="inner">
71    <div class="toggle">
72      <div class="lines" aria-label="切换导航栏">
73        <span class="line"></span>
74        <span class="line"></span>
75        <span class="line"></span>
76      </div>
77    </div>
78    <ul class="menu">
79      <li class="item title"><a href="/" rel="start">静かな港</a></li>
80    </ul>
81    <ul class="right">
82      <li class="item theme">
83        <i class="ic i-sun"></i>
84      </li>
85      <li class="item search">
86        <i class="ic i-search"></i>
87      </li>
88    </ul>
89  </div>
90</nav>
91
92      </div>
93      <div id="imgs" class="pjax">
94        <ul>
95          <li class="item" data-background-image="https://pic.imgdb.cn/item/640da8e2f144a010074ada1e.jpg"></li>
96          <li class="item" data-background-image="https://pic.imgdb.cn/item/640da7baf144a0100748d15b.jpg"></li>
97          <li class="item" data-background-image="https://pic.imgdb.cn/item/63bec36fbe43e0d30e539c8e.png"></li>
98          <li class="item" data-background-image="https://pic.imgdb.cn/item/64a27cfd1ddac507ccc4869c.jpg"></li>
99          <li class="item" data-background-image="https://pic.imgdb.cn/item/63bec1d4be43e0d30e4f1a79.jpg"></li>
100          <li class="item" data-background-image="https://pic.imgdb.cn/item/63bec31dbe43e0d30e52a4d4.webp"></li>
101        </ul>
102      </div>
103    </header>
104    <div id="waves">
105      <svg class="waves" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewB
105ox="0 24 150 28" preserveAspectRatio="none" shape-rendering="auto">
106        <defs>
107          <path id="gentle-wave" d="M-160 44c30 0 58-18 88-18s 58 18 88 18 58-18 88-18 58 18 88 18 v44h-352z" />
108        </defs>
109        <g class="parallax">
110          <use xlink:href="#gentle-wave" x="48" y="0" />
111          <use xlink:href="#gentle-wave" x="48" y="3" />
112          <use xlink:href="#gentle-wave" x="48" y="5" />
113          <use xlink:href="#gentle-wave" x="48" y="7" />
114        </g>
115      </svg>
116    </div>
117    <main>
118      <div class="inner">
119        <div id="main" class="pjax">
120          
121  <div class="index wrap">
122      <h2 class="divider">精选分类</h2>
123      <div class="cards">
124          
125<section class="item">
126  <div class="cover" data-background-image="/%E5%AD%A6%E4%B9%A0/cover.jpg">
127    <h2 class="title">学习</h2>
128  </div>
129  <div class="info">
130    <div class="ribbon"><a href="/categories/%E5%AD%A6%E4%B9%A0/" itemprop="url" title="学习">学习</a></div>
131    <div class="inner">
132        <ul class="posts">
133            <li><a title="=CMake=" href="/2023/03/26/CMake/">=CMake=</a></li>
134            <li><a title="Angr符号执行学习笔记" href="/2023/04/16/Angr%E7%AC%A6%E5%8F%B7%E6%89%A7%E8%A1%8C%E5%AD%A6%E4%B9%A0%E7%AC%94%E8%AE%B0/">Angr符号执行学习笔记</a></li>
135            <li><a title="CSAPPの学習記録" href="/2023/01/07/CSAPP%E3%81%AE%E5%AD%A6%E7%BF%92%E8%A8%98%E9%8C%B2/">CSAPPの学習記録</a></li>
136            <li><a title="DSACTF逆向专项" href="/2023/06/18/DSACTF%E9%80%86%E5%90%91%E4%B8%93%E9%A1%B9/">DSACTF逆向专项</a></li>
137            <li><a title="Google CTF 2023" href="/2023/07/03/Google-CTF-2023/">Google CTF 2023</a></li>
138            <li><a title="HWSCTF_WP" href="/2023/07/20/HWSCTF-WP/">HWSCTF_WP</a></li>
139        </ul>
140        <div class="meta footer">
141          <span>
142            <i class="ic i-file"></i>26 篇文章
143          </span>
144        </div>
145        <a href="/categories/%E5%AD%A6%E4%B9%A0/" itemprop="url" title="学习" class="btn">more...</a>
146    </div>
147  </div>
148</section>
149
150          
151<section class="item">
152  <div class="cover" data-background-image="/pwn%E3%81%AE%E5%AD%A6%E4%B9%A0/cover.jpg">
153    <h2 class="title">pwnの学习</h2>
154  </div>
155  <div class="info">
156    <div class="ribbon"><a href="/categories/pwn%E3%81%AE%E5%AD%A6%E4%B9%A0/" itemprop="url" title="pwnの学习">pwnの学习</a></div>
157    <div class="inner">
158        <ul class="posts">
159            <li><a title="PLT表与GOT表の延迟绑定机制学习" href="/2022/12/30/%E2%80%9CPLT%E8%A1%A8%E4%B8%8EGOT%E8%A1%A8%E3%81%AE%E5%BB%B6%E8%BF%9F%E7%BB%91%E5%AE%9A%E6%9C%BA%E5%88%B6%E5%AD%A6%E4%B9%A0%E2%80%9D/">
159PLT表与GOT表の延迟绑定机制学习</a></li>
160            <li><a title="基本ROP学习" href="/2022/12/15/%E5%9F%BA%E6%9C%ACROP%E5%AD%A6%E4%B9%A0/">基本ROP学习</a></li>
161        </ul>
162        <div class="meta footer">
163          <span>
164            <i class="ic i-file"></i>2 篇文章
165          </span>
166        </div>
167        <a href="/categories/pwn%E3%81%AE%E5%AD%A6%E4%B9%A0/" itemprop="url" title="pwnの学习" class="btn">more...</a>
168    </div>
169  </div>
170</section>
171
172          
173<section class="item">
174  <div class="cover" data-background-image="/Hexo/cover.jpg">
175    <h2 class="title">Hexo</h2>
176  </div>
177  <div class="info">
178    <div class="ribbon"><a href="/categories/Hexo/" itemprop="url" title="Hexo">Hexo</a></div>
179    <div class="inner">
180        <ul class="posts">
181            <li><a title="博客简介" href="/2022/12/15/%E5%8D%9A%E5%AE%A2%E7%AE%80%E4%BB%8B/">博客简介</a></li>
182            <li><a title="搭建过程" href="/2022/12/15/%E6%90%AD%E5%BB%BA%E8%BF%87%E7%A8%8B/">搭建过程</a></li>
183        </ul>
184        <div class="meta footer">
185          <span>
186            <i class="ic i-file"></i>2 篇文章
187          </span>
188        </div>
189        <a href="/categories/Hexo/" itemprop="url" title="Hexo" class="btn">more...</a>
190    </div>
191  </div>
192</section>
193
194          
195<section class="item">
196  <div class="cover" data-background-image="/%E9%9A%8F%E7%AC%94/cover.jpg">
197    <h2 class="title">随笔</h2>
198  </div>
199  <div class="info">
200    <div class="ribbon"><a href="/categories/%E9%9A%8F%E7%AC%94/" itemprop="url" title="随笔">随笔</a></div>
201    <div class="inner">
202        <ul class="posts">
203            <li><a title="以前的杂记" href="/2022/12/15/%E9%9A%8F%E7%AC%94/">以前的杂记</a></li>
204        </ul>
205        <div class="meta footer">
206          <span>
207            <i class="ic i-file"></i>1 篇文章
208          </span>
209        </div>
210        <a href="/categories/%E9%9A%8F%E7%AC%94/" itemprop="url" title="随笔" class="btn">more...</a>
211    </div>
212  </div>
213</section>
214
215      </div>
216    <h2 class="divider">文章列表</h2>
217    <div class="segments posts">
218        
219<article class="item">
220  <div class="cover">
221    <a href="/2023/12/26/TPCTF/" itemprop="url" title="TPCTF"><img data-src="https://pic.imgdb.cn/item/640da7eaf144a010074929bf.jpg"></a>
222  </div>
223  <div class="info">
224    
225<div class="meta">
226  <span class="item" title="创建时间:2023-12-26 15:39:34">
227    <span class="icon">
228      <i class="ic i-calendar"></i>
229    </span>
230    <time itemprop="dateCreated datePublished" datetime="2023-12-26T15:39:34+08:00">2023-12-26</time>
231  </span>
232  <span class="item" title="本文字数">
233    <span class="icon">
234      <i class="ic i-pen"></i>
235    </span>
236    <span>1.2k</span>
237    <span class="text">字</span>
238  </span>
239  <span class="item" title="阅读时长">
240    <span class="icon">
241      <i class="ic i-clock"></i>
242    </span>
243    <span>1 分钟</span>
244  </span>
245</div>
246
247    <h3><a href="/2023/12/26/TPCTF/" itemprop="url" title="TPCTF">TPCTF</a></h3>
248    <div class="excerpt">
249        # TPCTF
250# maze
251Welcome to the world of Maze!
252上午 9 点下了附件解包了出了 so 文件 10 点出去帮室友忙了 下午回来发现题已经被学长拿下三血了 tql
253故在赛后复现一下
254objcopy --dump-section pydata=maze.dump maze
255
256python pyinstxtractor.py maze.dump#得so文件
257
258python 运行,附加调试 so 文件 (在_Py_Dealloc 可以断下)
259看出来是 cpython...
260    </div>
261    <div class="meta footer">
262      <span>
263        <a href="/categories/%E5%AD%A6%E4%B9%A0/" itemprop="url" title="学习"><i class="ic i-flag"></i>学习</a>
264      </span>
265    </div>
266    <a href="/2023/12/26/TPCTF/" itemprop="url" title="TPCTF" class="btn">more...</a>
267  </div>
268</article>
269
270        
271<article class="item">
272  <div class="cover">
273    <a href="/2023/12/26/llvmpass%E5%AD%A6%E4%B9%A0%E5%8F%8A%E6%8C%87%E4%BB%A4%E6%9B%BF%E6%8D%A2/" itemprop="url" title="llvmpass学习及指令替换"><img data-src="https://pic.imgdb.cn/item/64a27cfd1ddac507ccc4869c.jpg"></a>
274  </div>
275  <div class="info">
276    
277<div class="meta">
278  <span class="item" title="创建时间:2023-12-26 15:39:33">
279    <span class="icon">
280      <i class="ic i-calendar"></i>
281    </span>
282    <time itemprop="dateCreated datePublished" datetime="2023-12-26T15:39:33+08:00">2023-12-26</time>
283  </span>
284  <span class="item" title="本文字数">
285    <span class="icon">
286      <i class="ic i-pen"></i>
287    </span>
288    <span>8.3k</span>
289    <span class="text">字</span>
290  </span>
291  <span class="item" title="阅读时长">
292    <span class="icon">
293      <i class="ic i-clock"></i>
294    </span>
295    <span>8 分钟</span>
296  </span>
297</div>
298
299    <h3><a href="/2023/12/26/llvmpass%E5%AD%A6%E4%B9%A0%E5%8F%8A%E6%8C%87%E4%BB%A4%E6%9B%BF%E6%8D%A2/" itemprop="url" title="llvmpass学习及指令替换">llvmpass学习及指令替换</a></h3>
300    <div class="excerpt">
301        # LLVM Pass
302# LLVM 基础 (随便写写)
303Compilers 编译器总体结构
304
305Lexical Analysis 词法分析
306
307Parsing 语法分析
308
309Semantic Analysis 语义分析 (主要)
310---------- 前端 ----------
311
312Optimization 优化 (主要)
313---------- 后端 ----------
314
315Code Generation 代码生成
316
317LLVM 编译器结构如下图
318
319优点:通用的中间表示(IR)来表示程序的结构和行为
320#...
321    </div>
322    <div class="meta footer">
323      <span>
324        <a href="/categories/%E5%AD%A6%E4%B9%A0/" itemprop="url" title="学习"><i class="ic i-flag"></i>学习</a>
325      </span>
326    </div>
327    <a href="/2023/12/26/llvmpass%E5%AD%A6%E4%B9%A0%E5%8F%8A%E6%8C%87%E4%BB%A4%E6%9B%BF%E6%8D%A2/" itemprop="url" title="llvmpass学习及指令替换" class="btn">more...</a>
328  </div>
329</article>
330
331        
332<article class="item">
333  <div class="cover">
334    <a href="/2023/09/21/IDA%E6%93%8D%E4%BD%9C%E3%81%AE%E6%9C%9D%E8%8A%B1%E5%A4%95%E6%8B%BE/" itemprop="url" title="IDA操作の朝花夕拾"><img data-src="https://pic.imgdb.cn/item/64a27d991ddac507ccc58c07.jpg"></a>
335  </div>
336  <div class="info">
337    
338<div class="meta">
339  <span class="item" title="创建时间:2023-09-21 18:12:32">
340    <span class="icon">
341      <i class="ic i-calendar"></i>
342    </span>
343    <time itemprop="dateCreated datePublished" datetime="2023-09-21T18:12:32+08:00">2023-09-21</time>
344  </span>
345  <span class="item" title="本文字数">
346    <span class="icon">
347      <i class="ic i-pen"></i>
348    </span>
349    <span>2.1k</span>
350    <span class="text">字</span>
351  </span>
352  <span class="item" title="阅读时长">
353    <span class="icon">
354      <i class="ic i-clock"></i>
355    </span>
356    <span>2 分钟</span>
357  </span>
358</div>
359
360    <h3><a href="/2023/09/21/IDA%E6%93%8D%E4%BD%9C%E3%81%AE%E6%9C%9D%E8%8A%B1%E5%A4%95%E6%8B%BE/" itemprop="url" title="IDA操作の朝花夕拾">IDA操作の朝花夕拾</a></h3>
361    <div class="excerpt">
362        # Trace 分析
363打开菜单项 [Debugger] -&amp;gt; [Tracing] -&amp;gt; [Tracing Options] 配置 Trace 选项
364在准备开始 Trace 的指令位置设置断点,并使该断点命中
365开启 Trace:[Debugger] -&amp;gt; [Tracing] -&amp;gt; [Instruction Tracing]
366开启后,单步执行一条指令,发现已经执行的指令变色表示开启 Trace 成功
367按下 F9 继续运行,直到下一个断点手动停止 Trace 或直到程序结束
368指令级 Trace 记录每一条指令的执行情况
369基本块...
370    </div>
371    <div class="meta footer">
372      <span>
373        <a href="/categories/%E5%AD%A6%E4%B9%A0/" itemprop="url" title="学习"><i class="ic i-flag"></i>学习</a>
374      </span>
375    </div>
376    <a href="/2023/09/21/IDA%E6%93%8D%E4%BD%9C%E3%81%AE%E6%9C%9D%E8%8A%B1%E5%A4%95%E6%8B%BE/" itemprop="url" title="IDA操作の朝花夕拾" class="btn">more...</a>
377  </div>
378</article>
379
380        
381<article class="item">
382  <div class="cover">
383    <a href="/2023/09/11/hitcon2023%E9%80%86%E5%90%91-The-Blade-WP/" itemprop="url" title="hitcon2023逆向 The Blade WP"><img data-src="https://pic.imgdb.cn/item/63bec151be43e0d30e4da569.jpg"></a>
384  </div>
385  <div class="info">
386    
387<div class="meta">
388  <span class="item" title="创建时间:2023-09-11 00:35:32">
389    <span class="icon">
390      <i class="ic i-calendar"></i>
391    </span>
392    <time itemprop="dateCreated datePublished" datetime="2023-09-11T00:35:32+08:00">2023-09-11</time>
393  </span>
394  <span class="item" title="本文字数">
395    <span class="icon">
396      <i class="ic i-pen"></i>
397    </span>
398    <span>16k</span>
399    <span class="text">字</span>
400  </span>
401  <span class="item" title="阅读时长">
402    <span class="icon">
403      <i class="ic i-clock"></i>
404    </span>
405    <span>14 分钟</span>
406  </span>
407</div>
408
409    <h3><a href="/2023/09/11/hitcon2023%E9%80%86%E5%90%91-The-Blade-WP/" itemprop="url" title="hitcon2023逆向 The Blade WP">hitcon2023逆向 The Blade WP</a></h3>
410    <div class="excerpt">
411        # hitcon2023 逆向 The Blade WP
412
413运行所给的程序 socket 通信相关
414
415由题目描述 A Rust tool for executing shellcode in a seccomp environment.
416字符串查找定位 发现其中 verify 方法可疑
417
418发现隐藏了一个命令 flag 是以添加命令行参数的方式输入 flag 调试得知输入 flag 长度为 64 位
419
420F7 进入 verify 发现加密逻辑 简单来讲 是一个大的 256 次 while 循环...
421    </div>
422    <div class="meta footer">
423      <span>
424        <a href="/categories/%E5%AD%A6%E4%B9%A0/" itemprop="url" title="学习"><i class="ic i-flag"></i>学习</a>
425      </span>
426    </div>
427    <a href="/2023/09/11/hitcon2023%E9%80%86%E5%90%91-The-Blade-WP/" itemprop="url" title="hitcon2023逆向 The Blade WP" class="btn">more...</a>
428  </div>
429</article>
430
431        
432<article class="item">
433  <div class="cover">
434    <a href="/2023/09/08/Xposed%E5%AD%A6%E4%B9%A0/" itemprop="url" title="Xposed学习"><img data-src="https://pic.imgdb.cn/item/64a27d8f1ddac507ccc579b9.png"></a>
435  </div>
436  <div class="info">
437    
438<div class="meta">
439  <span class="item" title="创建时间:2023-09-08 15:41:12">
440    <span class="icon">
441      <i class="ic i-calendar"></i>
442    </span>
443    <time itemprop="dateCreated datePublished" datetime="2023-09-08T15:41:12+08:00">2023-09-08</time>
444  </span>
445  <span class="item" title="本文字数">
446    <span class="icon">
447      <i class="ic i-pen"></i>
448    </span>
449    <span>4.2k</span>
450    <span class="text">字</span>
451  </span>
452  <span class="item" title="阅读时长">
453    <span class="icon">
454      <i class="ic i-clock"></i>
455    </span>
456    <span>4 分钟</span>
457  </span>
458</div>
459
460    <h3><a href="/2023/09/08/Xposed%E5%AD%A6%E4%B9%A0/" itemprop="url" title="Xposed学习">Xposed学习</a></h3>
461    <div class="excerpt">
462        # Xposed
463
464方法名复制为 xposed 的片段
465
466# 1.Hook 普通方法
467修改返回值
468XposedHelpers.findAndHookMethod(&quot;com.zj.wuaipojie.Demo&quot;, loadPackageParam.classLoader, &quot;a&quot;, String.class, new XC_MethodHook() &amp;#123; @Override protected void afterHookedMethod(MethodHookParam param) throws Throwable &amp;#123;...
469    </div>
470    <div class="meta footer">
471      <span>
472        <a href="/categories/%E5%AD%A6%E4%B9%A0/" itemprop="url" title="学习"><i class="ic i-flag"></i>学习</a>
473      </span>
474    </div>
475    <a href="/2023/09/08/Xposed%E5%AD%A6%E4%B9%A0/" itemprop="url" title="Xposed学习" class="btn">more...</a>
476  </div>
477</article>
478
479        
480<article class="item">
481  <div class="cover">
482    <a href="/2023/09/08/%E6%9B%B4%E6%96%B0%E5%90%8E%E6%9F%90%E7%94%B5%E8%A7%86%E9%A2%91APP%E5%8E%BB%E5%B9%BF%E5%91%8A%E7%A0%B4%E8%A7%A3/" itemprop="url" title="更新后某电视频APP去广告破解"><img data-src="https://pic.imgdb.cn/item/63ddecc64757feff33b7e519.png"></a>
483  </div>
484  <div class="info">
485    
486<div class="meta">
487  <span class="item" title="创建时间:2023-09-08 15:21:05">
488    <span class="icon">
489      <i class="ic i-calendar"></i>
490    </span>
491    <time itemprop="dateCreated datePublished" datetime="2023-09-08T15:21:05+08:00">2023-09-08</time>
492  </span>
493  <span class="item" title="本文字数">
494    <span class="icon">
495      <i class="ic i-pen"></i>
496    </span>
497    <span>2.1k</span>
498    <span class="text">字</span>
499  </span>
500  <span class="item" title="阅读时长">
501    <span class="icon">
502      <i class="ic i-clock"></i>
503    </span>
504    <span>2 分钟</span>
505  </span>
506</div>
507
508    <h3><a href="/2023/09/08/%E6%9B%B4%E6%96%B0%E5%90%8E%E6%9F%90%E7%94%B5%E8%A7%86%E9%A2%91APP%E5%8E%BB%E5%B9%BF%E5%91%8A%E7%A0%B4%E8%A7%A3/" itemprop="url" title="更新后某电视频APP去广告破解">更新后某电视频APP去广告破解</a></h3>
509    <div class="excerpt">
510        # 更新后某电视频 APP 去广告破解
511参考 52pj 大佬教程:https://www.52pojie.cn/thread-1814917-1-1.html
512教程中样本软件版本是 1.5.1, 本博客基于更新后的版本 1.6.1 部分操作不一样 大致思路一样的
513比较逆天的就是真机启动闪退 只好用模拟器了
514# 破解思路
515想在 APP 免费看片,有两种路径 一种是看广告,一种是邀请人数也就是推广,这里用的是通过去广告的方法实现免费看片
516# 广告分析
517许多广告的 SDK 文档百度能搜 就不列举了
518
519jadx 一开就能看见一堆广告相关
520# 去广告
521广告 SDK 少的话 就直接在文档里找关键的方法...
522    </div>
523    <div class="meta footer">
524      <span>
525        <a href="/categories/%E5%AD%A6%E4%B9%A0/" itemprop="url" title="学习"><i class="ic i-flag"></i>学习</a>
526      </span>
527    </div>
528    <a href="/2023/09/08/%E6%9B%B4%E6%96%B0%E5%90%8E%E6%9F%90%E7%94%B5%E8%A7%86%E9%A2%91APP%E5%8E%BB%E5%B9%BF%E5%91%8A%E7%A0%B4%E8%A7%A3/" itemprop="url" title="更新后某电视频APP去广告破解" class="btn">more...</a>
529  </div>
530</article>
531
532        
533<article class="item">
534  <div class="cover">
535    <a href="/2023/07/30/andriodlabs-%E6%9B%B4%E6%96%B0%E4%B8%AD/" itemprop="url" title="andriodlabs_更新中"><img data-src="https://pic.imgdb.cn/item/64a27d381ddac507ccc4e778.jpg"></a>
536  </div>
537  <div class="info">
538    
539<div class="meta">
540  <span class="item" title="创建时间:2023-07-30 23:34:38">
541    <span class="icon">
542      <i class="ic i-calendar"></i>
543    </span>
544    <time itemprop="dateCreated datePublished" datetime="2023-07-30T23:34:38+08:00">2023-07-30</time>
545  </span>
546  <span class="item" title="本文字数">
547    <span class="icon">
548      <i class="ic i-pen"></i>
549    </span>
550    <span>4.9k</span>
551    <span class="text">字</span>
552  </span>
553  <span class="item" title="阅读时长">
554    <span class="icon">
555      <i class="ic i-clock"></i>
556    </span>
557    <span>4 分钟</span>
558  </span>
559</div>
560
561    <h3><a href="/2023/07/30/andriodlabs-%E6%9B%B4%E6%96%B0%E4%B8%AD/" itemprop="url" title="andriodlabs_更新中">andriodlabs_更新中</a></h3>
562    <div class="excerpt">
563        # andriodlabs
564之前手贱又更新到安卓 13 了 又需要重新刷一次机 心累
565
566记住 frida-server 在 /data/local/tmp/
567有关 jar 包:https://zhuanlan.zhihu.com/p/82320492
568# 安卓架构
569Android 是一个开源的,基于 Linux 的移动设备操作系统
570应用程序组件是一个 Android 应用程序的基本构建块。这些组件由应用清单文件松耦合的组织。AndroidManifest.xml 描述了应用程序的每个组件,以及他们如何交互。
571以下是可以在 Android...
572    </div>
573    <div class="meta footer">
574      <span>
575        <a href="/categories/%E5%AD%A6%E4%B9%A0/" itemprop="url" title="学习"><i class="ic i-flag"></i>学习</a>
576      </span>
577    </div>
578    <a href="/2023/07/30/andriodlabs-%E6%9B%B4%E6%96%B0%E4%B8%AD/" itemprop="url" title="andriodlabs_更新中" class="btn">more...</a>
579  </div>
580</article>
581
582        
583<article class="item">
584  <div class="cover">
585    <a href="/2023/07/20/HWSCTF-WP/" itemprop="url" title="HWSCTF_WP"><img data-src="https://pic.imgdb.cn/item/64a27cfd1ddac507ccc4869c.jpg"></a>
586  </div>
587  <div class="info">
588    
589<div class="meta">
590  <span class="item" title="创建时间:2023-07-20 23:24:20">
591    <span class="icon">
592      <i class="ic i-calendar"></i>
593    </span>
594    <time itemprop="dateCreated datePublished" datetime="2023-07-20T23:24:20+08:00">2023-07-20</time>
595  </span>
596  <span class="item" title="本文字数">
597    <span class="icon">
598      <i class="ic i-pen"></i>
599    </span>
600    <span>17k</span>
601    <span class="text">字</span>
602  </span>
603  <span class="item" title="阅读时长">
604    <span class="icon">
605      <i class="ic i-clock"></i>
606    </span>
607    <span>15 分钟</span>
608  </span>
609</div>
610
611    <h3><a href="/2023/07/20/HWSCTF-WP/" itemprop="url" title="HWSCTF_WP">HWSCTF_WP</a></h3>
612    <div class="excerpt">
613        # HWSCTF
614没有官方 WP💢😠
615出了一道 animals, 另外两道是赛后看大佬 WP 复现的,一道安卓一道流量分析 主要是太摆了…
616# Animals
617
618去花指令
619
620[+] Dump 0x608090 - 0x60809F (16 bytes) :
621[0xDD, 0xB2, 0x6D, 0xF3, 0xE6, 0x0A, 0xC7, 0x83, 0x4A, 0x93, 0x50, 0xB4, 0xA4, 0x59, 0xAB, 0x0E]
622魔改哈希算法
623
624#include &amp;lt;memory.h&gt;#include &quot;md5.h&quot; unsigned...
625    </div>
626    <div class="meta footer">
627      <span>
628        <a href="/categories/%E5%AD%A6%E4%B9%A0/" itemprop="url" title="学习"><i class="ic i-flag"></i>学习</a>
629      </span>
630    </div>
631    <a href="/2023/07/20/HWSCTF-WP/" itemprop="url" title="HWSCTF_WP" class="btn">more...</a>
632  </div>
633</article>
634
635        
636<article class="item">
637  <div class="cover">
638    <a href="/2023/07/15/ollvm%E7%8E%AF%E5%A2%83%E9%85%8D%E7%BD%AE/" itemprop="url" title="ollvm环境配置"><img data-src="https://pic.imgdb.cn/item/63bec1d4be43e0d30e4f1a79.jpg"></a>
639  </div>
640  <div class="info">
641    
642<div class="meta">
643  <span class="item" title="创建时间:2023-07-15 23:16:59">
644    <span class="icon">
645      <i class="ic i-calendar"></i>
646    </span>
647    <time itemprop="dateCreated datePublished" datetime="2023-07-15T23:16:59+08:00">2023-07-15</time>
648  </span>
649  <span class="item" title="本文字数">
650    <span class="icon">
651      <i class="ic i-pen"></i>
652    </span>
653    <span>2.4k</span>
654    <span class="text">字</span>
655  </span>
656  <span class="item" title="阅读时长">
657    <span class="icon">
658      <i class="ic i-clock"></i>
659    </span>
660    <span>2 分钟</span>
661  </span>
662</div>
663
664    <h3><a href="/2023/07/15/ollvm%E7%8E%AF%E5%A2%83%E9%85%8D%E7%BD%AE/" itemprop="url" title="ollvm环境配置">ollvm环境配置</a></h3>
665    <div class="excerpt">
666        # ollvm 环境配置
667# 介绍
668Ubuntu 虚拟机 22.04
669OLLVM 介绍看这个 Deobfuscation: recovering an OLLVM-protected program
670Ollvm 混淆主要分成三种模式,这三种模式主要是流程平坦化,指令替换,以及控制流伪造。
671流程平坦化 :这个模式主要通过将 if-else 语句替换成 do-while 语句,然后通过 switch 语句来对流程的控制,这样就能模糊基本块之间的前后关系。
672指令替换 :这个模式主要通过使用更复杂的指令序列来替换一些标准的二元运算符,从而增加逆向的难度。
673控制流伪造...
674    </div>
675    <div class="meta footer">
676      <span>
677        <a href="/categories/%E5%AD%A6%E4%B9%A0/" itemprop="url" title="学习"><i class="ic i-flag"></i>学习</a>
678      </span>
679    </div>
680    <a href="/2023/07/15/ollvm%E7%8E%AF%E5%A2%83%E9%85%8D%E7%BD%AE/" itemprop="url" title="ollvm环境配置" class="btn">more...</a>
681  </div>
682</article>
683
684        
685<article class="item">
686  <div class="cover">
687    <a href="/2023/07/03/UIUCTF2023/" itemprop="url" title="UIUCTF2023"><img data-src="https://pic.imgdb.cn/item/640da88af144a010074a43a4.
687jpg"></a>
688  </div>
689  <div class="info">
690    
691<div class="meta">
692  <span class="item" title="创建时间:2023-07-03 15:51:49">
693    <span class="icon">
694      <i class="ic i-calendar"></i>
695    </span>
696    <time itemprop="dateCreated datePublished" datetime="2023-07-03T15:51:49+08:00">2023-07-03</time>
697  </span>
698  <span class="item" title="本文字数">
699    <span class="icon">
700      <i class="ic i-pen"></i>
701    </span>
702    <span>1.4k</span>
703    <span class="text">字</span>
704  </span>
705  <span class="item" title="阅读时长">
706    <span class="icon">
707      <i class="ic i-clock"></i>
708    </span>
709    <span>1 分钟</span>
710  </span>
711</div>
712
713    <h3><a href="/2023/07/03/UIUCTF2023/" itemprop="url" title="UIUCTF2023">UIUCTF2023</a></h3>
714    <div class="excerpt">
715        # UIUCTF
716做了一道题就摆烂了 (第二天考试) Win95 的主题挺有特色
717# VMWHERE1
718
719给了两个文件一个 chal 是虚拟机程序 一个 program 是二进制文件 就是需要用虚拟机载入的程序
720# chal
721
722IDA7.7 打开虚拟机程序,逻辑很清晰 while 循环和 switch-case 其中每一个 case 对应一个操作
723可以用 x86 汇编指令近似理解
724
725case 0: 返回指令(ret)
726case 1: 加法指令(add)
727case 2: 减法指令(sub)
728case 3: 位与指令(and)
729case 4: 位或指令(or)
730case 5:...
731    </div>
732    <div class="meta footer">
733      <span>
734        <a href="/categories/%E5%AD%A6%E4%B9%A0/" itemprop="url" title="学习"><i class="ic i-flag"></i>学习</a>
735      </span>
736    </div>
737    <a href="/2023/07/03/UIUCTF2023/" itemprop="url" title="UIUCTF2023" class="btn">more...</a>
738  </div>
739</article>
740
741    </div>
742
743  </div>
744
745  
746  <nav class="pagination">
747    <div class="inner">
748    <span class="page-number current">1</span><a class="page-number" href="/page/2/">2</a><span class="space">&hellip;</span><a class="page-number" href="/page/4/">4</a><a class="extend next" rel="next" href="/page/2/"><i class="ic i-angle-right" aria-label="下一页"></i></a>
749    </div>
750  </nav>
751
752
753
754        </div>
755        <div id="sidebar">
756          
757<div class="inner">
758
759  <div class="panels">
760    <div class="inner">
761      <div class="contents panel pjax" data-title="文章目录">
762      </div>
763      <div class="related panel pjax" data-title="系列文章">
764      </div>
765      <div class="overview panel" data-title="站点概览">
766        <div class="author" itemprop="author" itemscope itemtype="http://schema.org/Person">
767  <img class="image" itemprop="image" alt="3cly"
768      data-src="/images/avatar.png">
769  <p class="name" itemprop="name">3cly</p>
770  <div class="description" itemprop="description">一只菜狗的博客</div>
771</div>
772
773<nav class="state">
774    <div class="item posts">
775      <a href="/archives/">
776        <span class="count">31</span>
777        <span class="name">文章</span>
778      </a>
779    </div>
780    <div class="item categories">
781      <a href="/categories/">
782        <span class="count">4</span>
783        <span class="name">分类</span>
784      </a>
785    </div>
786    <div class="item tags">
787      <a href="/tags/">
788        <span class="count">2</span>
789        <span class="name">标签</span>
790      </a>
791    </div>
792</nav>
793
794<div class="social">
795      <span class="exturl item github" data-url="aHR0cHM6Ly9naXRodWIuY29tLzNjbHk=" title="https:&#x2F;&#x2F;github.com&#x2F;3cly"><i class="ic i-github"></i></span>
796</div>
797
798<ul class="menu">
799  
800    
801  <li class="item">
802    <a href="/" rel="section"><i class="ic i-home"></i>首页</a>
803  </li>
804
805    
806  <li class="item">
807    <a href="/categories/" rel="section"><i class="ic i-th"></i>分类</a>
808  </li>
809
810    
811  <li class="item">
812    <a href="/tags/" rel="section"><i class="ic i-tags"></i>标签</a>
813  </li>
814
815    
816  <li class="item">
817    <a href="/link/" rel="section"><i class="ic i-magic"></i>links</a>
818  </li>
819
820
821</ul>
822
823      </div>
824    </div>
825  </div>
826
827  <ul id="quick">
828    <li class="prev pjax">
829    </li>
830    <li class="up"><i class="ic i-arrow-up"></i></li>
831    <li class="down"><i class="ic i-arrow-down"></i></li>
832    <li class="next pjax">
833        <a href="/page/2/" rel="next" title="下一篇"><i class="ic i-chevron-right"></i></a>
834    </li>
835    <li class="percent"></li>
836  </ul>
837</div>
838
839        </div>
840        <div class="dimmer"></div>
841      </div>
842    </main>
843    <footer id="footer">
844      <div class="inner">
845        <div class="widgets">
846          
847<div class="rpost pjax">
848  <h2>随机文章</h2>
849  <ul>
850      
851  <li class="item">
852    
853<div class="breadcrumb">
854<a href="/categories/%E5%AD%A6%E4%B9%A0/" title="分类于 学习">学习</a>
855</div>
856
857    <span><a href="/2023/06/18/%E7%A0%B4%E8%A7%A3010Editor/" title="ç ´è§£010Editor">ç ´è§£010Editor</a></span>
858  </li>
859
860      
861  <li class="item">
862    
863<div class="breadcrumb">
864<a href="/categories/%E5%AD%A6%E4%B9%A0/" title="分类于 学习">学习</a>
865</div>
866
867    <span><a href="/2023/07/20/HWSCTF-WP/" title="HWSCTF_WP">HWSCTF_WP</a></span>
868  </li>
869
870      
871  <li class="item">
872    
873<div class="breadcrumb">
874<a href="/categories/%E5%AD%A6%E4%B9%A0/" title="分类于 学习">学习</a>
875</div>
876
877    <span>
877<a href="/2023/02/04/N1CTF%20Junior%20%20WP%20%20by%203cly/" title="N1CTF Junior  WP">N1CTF Junior  WP</a></span>
878  </li>
879
880      
881  <li class="item">
882    
883<div class="breadcrumb">
884<a href="/categories/%E5%AD%A6%E4%B9%A0/" title="分类于 学习">学习</a>
885</div>
886
887    <span><a href="/2023/12/26/TPCTF/" title="TPCTF">TPCTF</a></span>
888  </li>
889
890      
891  <li class="item">
892    
893<div class="breadcrumb">
894<a href="/categories/%E5%AD%A6%E4%B9%A0/" title="分类于 学习">学习</a>
895</div>
896
897    <span><a href="/2023/07/03/Google-CTF-2023/" title="Google CTF 2023">Google CTF 2023</a></span>
898  </li>
899
900      
901  <li class="item">
902    
903<div class="breadcrumb">
904<a href="/categories/%E5%AD%A6%E4%B9%A0/" title="分类于 学习">学习</a>
905</div>
906
907    <span><a href="/2023/05/28/%E5%88%9D%E8%AF%86Frida/" title="初识Frida">初识Frida</a></span>
908  </li>
909
910      
911  <li class="item">
912    
913<div class="breadcrumb">
914<a href="/categories/%E5%AD%A6%E4%B9%A0/" title="分类于 学习">学习</a>
915</div>
916
917    <span><a href="/2023/02/26/shellcode&&vm/" title="shellcode&amp;&amp;vm">shellcode&&vm</a></span>
918  </li>
919
920      
921  <li class="item">
922    
923<div class="breadcrumb">
924<a href="/categories/%E5%AD%A6%E4%B9%A0/" title="分类于 学习">学习</a>
925</div>
926
927    <span><a href="/2023/04/16/Angr%E7%AC%A6%E5%8F%B7%E6%89%A7%E8%A1%8C%E5%AD%A6%E4%B9%A0%E7%AC%94%E8%AE%B0/" title="Angr符号执行学习笔记">Angr符号执行学习笔记</a></span>
928  </li>
929
930      
931  <li class="item">
932    
933<div class="breadcrumb">
934<a href="/categories/%E5%AD%A6%E4%B9%A0/" title="分类于 学习">学习</a>
935</div>
936
937    <span><a href="/2023/06/18/DSACTF%E9%80%86%E5%90%91%E4%B8%93%E9%A1%B9/" title="DSACTF逆向专项">DSACTF逆向专项</a></span>
938  </li>
939
940      
941  <li class="item">
942    
943<div class="breadcrumb">
944<a href="/categories/%E5%AD%A6%E4%B9%A0/" title="分类于 学习">学习</a>
945</div>
946
947    <span><a href="/2023/07/15/ollvm%E7%8E%AF%E5%A2%83%E9%85%8D%E7%BD%AE/" title="ollvm环境配置">ollvm环境配置</a></span>
948  </li>
949
950  </ul>
951</div>
952<div>
953  <h2>最新评论</h2>
954  <ul class="leancloud-recent-comment"></ul>
955</div>
956
957        </div>
958        <div class="status">
959  <div class="copyright">
960    
961    &copy; 2022 – 
962    <span itemprop="copyrightYear">2024</span>
963    <span class="with-love">
964      <i class="ic i-sakura rotate"></i>
965    </span>
966    <span class="author" itemprop="copyrightHolder">3cly @ 静かな港</span>
967  </div>
968  <div class="count">
969    <span class="post-meta-item-icon">
970      <i class="ic i-chart-area"></i>
971    </span>
972    <span title="站点总字数">150k 字</span>
973
974    <span class="post-meta-divider">|</span>
975    <span class="post-meta-item-icon">
976      <i class="ic i-coffee"></i>
977    </span>
978    <span title="站点阅读时长">2:16</span>
979  </div>
980  <div class="powered-by">
981    基于 <span class="exturl" data-url="aHR0cHM6Ly9oZXhvLmlv">Hexo</span> & Theme.<span class="exturl" data-url="aHR0cHM6Ly9naXRodWIuY29tL2FtZWhpbWUvaGV4by10aGVtZS1zaG9rYQ==">Shoka</span>
982  </div>
983</div>
984
985      </div>
986    </footer>
987  </div>
988<script data-config type="text/javascript">
989  var LOCAL = {
990    path: '',
991    favicon: {
992      show: "(●´3`●)やれやれだぜ",
993      hide: "(´Д`)大変だ!"
994    },
995    search : {
996      placeholder: "文章搜索",
997      empty: "关于 「 ${query} 」,什么也没搜到",
998      stats: "${time} ms 内找到 ${hits} 条结果"
999    },
1000    valine: true,fancybox: true,
1001    copyright: '复制成功,转载请遵守 <i class="ic i-creative-commons"></i>BY-NC-SA 协议。',
1002    ignores : [
1003      function(uri) {
1004        return uri.includes('#');
1005      },
1006      function(uri) {
1007        return new RegExp(LOCAL.path+"$").test(uri);
1008      }
1009    ]
1010  };
1011</script>
1011
1012
1013<script src="https://cdn.polyfill.io/v2/polyfill.js"></script>
1013
1014
1015<script src="//cdn.jsdelivr.net/combine/npm/[email protected]/pace.min.js,npm/[email protected]/pjax.min.js,npm/[email protected]/dist/fetch.umd.min.js,npm/[email protected]/lib/anime.min.js,npm/algoliasearch@4/dist/algoliasearch-lite.umd.js,npm/instantsearch.js@4/dist/instantsearch.production.min.js,npm/lozad@1/dist/lozad.min.js,npm/quicklink@2/dist/quicklink.umd.js"></script>
1015
1016
1017<script src="/js/app.js?v=0.2.5"></script>
1017
1018
1019
1020
1021
1022</body>
1023</html>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.