# BUU_PWN_EXP

**Repository Path**: yutaosec/BUU_PWN_EXP

## Basic Information

- **Project Name**: BUU_PWN_EXP
- **Description**: All BUU PWN exp.Updating...
- **Primary Language**: Python
- **License**: Not specified
- **Default Branch**: main
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2021-08-06
- **Last Updated**: 2021-08-06

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# BUU_PWN_EXP

这里会放我做过的pwn题的exp，只有exp，没有wp。（blog里有wp）

里面一般是直接用的buu平台提供的libc，所以很少写LibcSearch.

下面是目录，直接搜索可以找到对应的具体位置 

`tree /f`


```
│  README.md
│
├─0x01_0x0F(Finish)
│      0x2.rip.py
│      0x3.warmup_csaw_2016.py
│      0x4.pwn1_sctf_2016.py
│      0x5.ciscn_2019_n_1.py
│      0x6.jarvisoj_level0.py
│      0x7.ciscn_2019_c_1(EXP1).py
│      0x7.ciscn_2019_c_1(EXP2).py
│      0x7.ciscn_2019_c_1(EXP3).py
│      0x8.[OGeek2019]babyrop(EXP1).py
│      0x8.[OGeek2019]babyrop(EXP2).py
│      0x9.[第五空间2019 决赛]PWN5.py
│      0xA.get_started_3dsctf_2016(EXP1).py
│      0xA.get_started_3dsctf_2016(EXP2).py
│      0xB.ciscn_2019_en_2.py
│      0xC.jarvisoj_level2.py
│      0xD.ciscn_2019_n_8.py
│      0xE.not_the_same_3dsctf_2016.py
│      0xF.bjdctf_2020_babystack.py
│
├─0x10_0x1F(Finish)
│      0x10.[HarekazeCTF2019]baby_rop.py
│      0x11.jarvisoj_level2_x64.py
│      0x12.ciscn_2019_n_5(EXP1).py
│      0x12.ciscn_2019_n_5(EXP2).py
│      0x13.ciscn_2019_ne_5.py
│      0x14.others_shellcode.py
│      0x14.铁人三项(第五赛区)_2018_rop.py
│      0x15.bjdctf_2020_babyrop.py
│      0x16.babyheap_0ctf_2017.py
│      0x17.pwn2_sctf_2016.py
│      0x18.ciscn_2019_s_3.py
│      0x19.[HarekazeCTF2019]baby_rop2.py
│      0x1A.jarvisoj_fm.py
│      0x1B.jarvisoj_tell_me_something.py
│      0x1C.jarvisoj_level4.py
│      0x1D.jarvisoj_level3.py
│      0x1E.[Black Watch 入群题]PWN.py
│      0x1F.bjdctf_2020_babystack2.py
│
├─0x20_0x2F(Finish)
│      0x20.jarvisoj_level3_x64.py
│      0x21.picoctf_2018_rop chain.py
│      0x22.[ZJCTF 2019]EasyHeap.py
│      0x23.bjdctf_2020_babyrop2.py
│      0x24.jarvisoj_test_your_memory.py
│      0x25.bjdctf_2020_router.py
│      0x26.hitcontraining_uaf.py
│      0x27.picoctf_2018_buffer overflow 1.py
│      0x28.pwnable_orw.py
│      0x29.wustctf2020_getshell.py
│      0x2A.cmcc_simplerop.py
│      0x2B.babyfengshui_33c3_2016.py
│      0x2C.picoctf_2018_buffer overflow 2.py
│      0x2D.xdctf2015_pwn200.py
│      0x2E.mrctf2020_shellcode.py
│      0x2F.bbys_tu_2016.py
│
└─0x30_0x3F(Updating)
        0x30.jarvisoj_level1(EXP1).py
        0x30.jarvisoj_level1(EXP2).py
        0x31.inndy_rop(EXP1).py
        0x31.inndy_rop(EXP2).py
        0x31.inndy_rop(EXP3).py
        0x31.inndy_rop(EXP4).py
        0x35.others_babystack.py
        0x36.pwnable_start.py
```