https://github.com/yikesoftware/d3ctf-2022-pwn-d3guard

[D^3CTF 2022] pwn-d3guard attachment and official writeup (English & Chinese)
https://github.com/yikesoftware/d3ctf-2022-pwn-d3guard

d3ctf d3guard edk2 pwn uefi-pwn writeup

Last synced: 3 months ago
JSON representation

[D^3CTF 2022] pwn-d3guard attachment and official writeup (English & Chinese)

• Host: GitHub
• URL: https://github.com/yikesoftware/d3ctf-2022-pwn-d3guard
• Owner: yikesoftware
• Created: 2022-03-06T08:46:52.000Z (almost 3 years ago)
• Default Branch: main
• Last Pushed: 2022-03-09T14:43:44.000Z (almost 3 years ago)
• Last Synced: 2024-07-14T07:48:19.947Z (7 months ago)
• Topics: d3ctf, d3guard, edk2, pwn, uefi-pwn, writeup
• Language: Python
• Homepage:
• Size: 12.4 MB
• Stars: 9
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-uefi-security - D^3CTF-2022-pwn-d3guard

README

        
# d3guard

A harmless challenge for your D^3 tour.

Exp: `cat /flag` (*^_^*).

> Hint: There is a little vulnerability that can complete information leak. This is very helpful for the progress of some teams.

> Hint: The builtin `Print()` function accept multi args, what could this mean?  or you can just read `https://github.com/tianocore/edk2` to find some directions.

# Notice

1. The environment of the attachment is **not exactly** the same as the game environment.

2. If you have questions about the challenge, please ask the author.

# Writeup

English：[writeup en-US](https://github.com/yikesoftware/d3ctf-2022-pwn-d3guard/blob/main/writeup%20en-US.md)

中文：[writeup zh-cn](https://github.com/yikesoftware/d3ctf-2022-pwn-d3guard/blob/main/writeup%20zh-cn.md)

Players who have doubts about the solution of this challenge welcome [issue](https://github.com/yikesoftware/d3ctf-2022-pwn-d3guard/issues) me!