CTF逆向-环境搭建记录

由于系统总是偶然出问题，记录此文以便快速恢复环境。

基本环境

1. 设置密码

$ sudo passwd root
$ sudo passwd 用户名

2. 更换源为清华源 or else
3. 系统更新

$ apt update
$ apt fullupgrade
$ apt autoremove
$ apt autoclean

4. 配置SSH

$ apt install openssh-server 
$ /etc/init.d/ssh start
$ vi /etc/ssh/sshd_config
`PasswordAuthentication yes`前面的`#`删除
`PermitRootLogin prohibit-password`改成`PermitRootLogin yes`
$ /etc/init.d/ssh restart

5. 配置Windows Terminal

{
                "guid": "{c96832dc-e536-4089-8b63-c7c07b4413c6}",
                "hidden": false,
                "name": "ubuntu_16",
                "source": "ssh ams@192.168.169.128"
}

6. 支持32位

$ dpkg --add-architecture i386
$ apt update
$ apt install gcc-multilib g++-multilib

7. 支持crypto密码类库

$ apt install libssl-dev
$ apt install libssl-dev:i386

8. 安装谷歌输入法

$ apt install fcitx-googlepinyin
`System Setting`->`Language Support`，将输入法系统修改为`fcitx`

工具

windows

CyberChef

https://github.com/ByeRose/CyberChef_CHS

IDA Pro 7.5

https://bbs.pediy.com/thread-264346.htm

Exeinfo PE

http://www.exeinfo.byethost18.com/

010 Editor

https://www.sweetscape.com/010editor/

Ollydbg

http://www.ollydbg.org/

draw.io绘制流程图

https://www.diagrams.net/

Binary Ninja

https://bbs.pediy.com/thread-263648.htm

linux

vim

$  apt install vim-gtk3

curl

$ apt install curl

pip

$ curl https://bootstrap.pypa.io/pip/2.7/get-pip.py -o get-pip.py
$ python get-pip.py

pip3

$ apt install python3-pip
$ curl  https://bootstrap.pypa.io/pip/3.5/get-pip.py -o get-pip.py
$ python3 get-pip.py

git

$ apt install git

pwntools

$ pip install pwntools

gdb插件：gef pwndbg peda

https://www.cnblogs.com/ByeRose/p/14598535.html

插件切换脚本

#!/bin/bash
read -p $'请选择将要使用的gdb插件.\n[1]pwndbg\n[2]gef\n[3]peda\n[4]peda-heap\n>> ' plugin
if ((plugin==1))
then 
    echo "source /home/ams/Documents/pwndbg/gdbinit.py" > /home/ams/.gdbinit
elif ((plugin==2))
then 
    echo "source /home/ams/Documents/gef/gef.py" > /home/ams/.gdbinit
elif ((plugin==3))
then
    echo "source /home/ams/Documents/peda/peda.py" > /home/ams/.gdbinit
elif ((plugin==4))
then
    echo "source /home/ams/Documents/peda-heap/peda.py" > /home/ams/.gdbinit
else
    echo $'WRONG!\n'
fi

LibcSearcher

$ git clone https://github.com/lieanu/LibcSearcher.git
$ cd LibcSearcher
$ python setup.py develop

radare2

$ git clone https://github.com/radareorg/radare2
$ cd radare2 ; sys/install.sh

ropper

$ pip3 install ropper

ROPgadget

$ pip install ropgadget

docker

$ curl -sSL https://get.daocloud.io/docker | sh

angr

$ pip install virtualenvwrapper

设置一个环境变量WORKON_HOME：
$ export WORKON_HOME=$HOME/Python-workhome
$ export VIRTUALENVWRAPPER_PYTHON=/usr/bin/python3

启动virtualenvwrapper.sh脚本：
$ source /usr/local/bin/virtualenvwrapper.sh

创建一个虚拟环境：
$ mkvirtualenv angr

之后会自动进入到虚拟环境中，再安装angr
> pip install angr