[CTF, Dreamhack] Master Index

DreamHack·HTB·LOS 기반 바이너리 취약점 분석 및 exploit 개발 과정을 기록한 아카이브입니다.

50+개의 문제에 대해 취약점 유형, 공격 기법, exploit 전략을 정리했습니다.

각 write-up은

로 구성되어 있으며, 본 페이지는 전체 목록의 인덱스 역할을 합니다.

image.png

image.png

Property Type 설명
Title Title 문제 이름
Category Select Pwnable / Reversing / Web / Crypto / Misc
Vuln Type Multi-select Heap overflow, UAF, tcache poisoning, format string, ROP, CVE Series 등
Technique Multi-select leak → base calc, safe-linking bypass, partial overwrite, function pointer hijack 등
Platform Select DreamHack
Date Date 2023 ~ 2025
Difficulty Select 1 / 2 / 3 / 4 / 5 / 6 / 7 / 8 / 9 / 10
Link URL 개별 write-up 페이지 링크
Title Category Vuln Type Technique Platform Difficulty Link
Showdown Pwnable CVE-2022-24724, heap OOB cmark-gfm 테이블 파서 heap OOB → RCE DreamHack 10 Showdown Writeup
Reconquista Pwnable Binary exploit (heap/stack) 복합 취약점 체인, leak → exploit DreamHack 10 Reconquista Writeup
NPU Pwnable Binary exploit (stack/heap) 메뉴 기반 취약점 분석 및 exploit DreamHack 9 NPU Writeup
baby-turbofan Pwnable JIT / engine logic bug 엔진 동작/취약 로직 분석 및 exploit DreamHack 8 baby-turbofan Writeup
[LINE CTF 2021] babychrome Pwnable Browser / sandbox exploit 브라우저 메모리 취약점 exploit DreamHack 9 babychrome Writeup
Yorix' Light Novel Club ALL Mixed logic puzzle 다양한 입력/상태 기반 퍼즐 DreamHack 9 Yorix' Ligh Novel Club Writeup
[LINE CTF 2021] Query Firewall Pwnable Sandbox / WAF bypass 필터/쿼리 방화벽 우회 exploit DreamHack 9 Query Firewall Writeup
Heliodor Web Auth/logic bypass 인증/권한 체크 로직 우회 DreamHack 9 Heliodor Writeup
CLTE Web Request smuggling CL.TE 조합을 이용한 Request Smuggling DreamHack 6 / FirstBlood CLTE Writeup
Pop Rdi Pwnable ROP pop rdi → ret 기반 ret2libc DreamHack 8 Pop Rdi Writeup
나랏말싸미 악용하기 Pwnable Input/encoding bug 한글/인코딩 기반 입력 처리 취약점 exploit DreamHack 8 나랏말싸미 악용하기 Writeup
Unconventional Reversing Anti-debug / 난독화 난독화 해제 및 흐름 복원 DreamHack 8 Unconventional Writeup
SentenceNet Web Logic bypass 문장 판별/세션 검증 우회 DreamHack 8 SentenceNet Writeup
Bomblab - Hard Reversing Logic puzzle 분기 퍼즐 복호화 DreamHack 7 Bomblab - Hard Writeup
operator Pwnable Heap, safe-linking safe-linking bypass + tcache poisoning DreamHack 7 Operator Writeup
js is the best Web JS logic / DOM JS 로직 기반 취약점 exploit DreamHack 5 js is the best Writeup
goOutside Pwnable Path traversal 파일 경로 검증 우회 DreamHack 4 goOutside Writeup
Trust the Client Filter Web Client-side trust bug 클라이언트 검증 우회 DreamHack 3 Trust the Client Filter Writeup
rev-basic-9 Reversing Basic reversing 복합 조건/상태 머신 분석 DreamHack 3 rev-basic-9 Writeup
blind sql injection advanced Web Blind SQLi boolean/time 기반 Blind SQLi DreamHack 2 blind sql injection advanced Writeup
Are you admin? Web Auth bypass 세션/쿠키 기반 권한 상승 DreamHack 2 Are you admin? Writeup
Return to Library Pwnable ret2libc libc 함수 호출 기반 exploit DreamHack 2 Return to Library Writeup
rev-basic-3 Reversing Basic reversing 분기/루프 로직 분석 DreamHack 2 rev-basic-3 Writeup
rev-basic-7 Reversing Basic reversing 암호/비트 연산 복원 DreamHack 2 rev-basic-7 Writeup
ssp_001 Pwnable Stack canary canary leak + SSP 우회 DreamHack 2 ssp_001 Writeup
basic_exploitation_002 Pwnable GOT overwrite libc leak → GOT overwrite exploit DreamHack 2 basic_exploitation_002 Writeup
basic_exploitation_003 Pwnable Stack exploit 다단계 ROP DreamHack 2 basic_exploitation_003 Writeup
Return to Shellcode Pwnable shellcode NX 회피 및 실행 DreamHack 2 Return to Shellcode Writeup
Out_of_bounds Pwnable OOB read/write 메모리 경계 검사 부재 exploit DreamHack 4 out_of_bounds Writeup
Boxes Misc Forensics 파일/환경 분석 DreamHack 1 Boxes Writeup
basic_heap_overflow Reversing Heap overflow heap 구조 분석 DreamHack 1 Basic_heap_overflow Writeup
rev-basic-2 Reversing Basic reversing 수식/조건 복원 DreamHack 1 rev-basic-2 Writeup
rev-basic-4 Reversing Basic reversing 스택/레지스터 분석 DreamHack 1 rev-basic-4 Writeup
rev-basic-5 Reversing Basic reversing 기본 흐름 추적 DreamHack 1 rev-basic-5 Writeup
rev-basic-6 Reversing Basic reversing 문자열/조건 분석 DreamHack 1 rev-basic-6 Writeup
basic_exploitation_001 Pwnable Stack overflow 기본 bof DreamHack 1 basic_explotation_001 Writeup
bof Pwnable Buffer overflow 스택 bof 기초 DreamHack 1 bof Writeup
rop Pwnable ROP ret chain 구성 DreamHack 1 rop Writeup
basic_exploitation_000 Pwnable Stack exploit gdb 기초 + bof DreamHack 1 basic_exploitation_000 Writeup
이름을 입력해주세요 Pwnable 입력 overflow 입력 처리 취약점 exploit DreamHack 1 이름을 입력해주세요 Writeup
Begineer set ALL Mixed basic 기초 세트 DreamHack 새싹 beginner set Writeup
[Lord of SQLinjection] All Write-Up Web SQL Injection 단계별 SQLi 정리 LoS Dreamhack 아님 SQL Injection Writeup
주작 Crypto Custom crypto 암호 알고리즘/프로토콜 분석 DreamHack 6 / FirstBlood 주작 Writeup
이상한 랜섬웨어 - Revenge Crypto Ransomware crypto 키/복호 로직 분석 DreamHack 2 / FirstBlood 이상한 랜섬웨어 Writeup
Kill GETH Pwnable DoS / node crash WS/HTTP 폭주로 geth crash DreamHack 미정 / FirstBlood Kill GETH Writeup
Labyrinth Reversing Logic bug 퍼즐 로직 분석 DreamHack 1 / FirstBlood Labyrinth Writeup