{"id":1553,"date":"2024-11-05T18:00:46","date_gmt":"2024-11-05T10:00:46","guid":{"rendered":"http:\/\/www.liujh168.com\/?p=1505"},"modified":"2024-11-05T18:00:46","modified_gmt":"2024-11-05T10:00:46","slug":"webctf-2","status":"publish","type":"post","link":"https:\/\/www.liujh168.com\/index.php\/2024\/11\/05\/webctf-2\/","title":{"rendered":"\u6784\u5efa\u516c\u53f8\u7f51\u7edc\u5b89\u5168\u57f9\u8bad\u5b66\u4e60\u548c\u7ade\u8d5b\u5e73\u53f0"},"content":{"rendered":"\n<h3 class=\"wp-block-heading\" id=\"\u65b9\u6848\u6982\u8ff0\">\u65b9\u6848\u6982\u8ff0<\/h3>\n\n\n\n<p>\u7ed3\u5408CTFD\u5e73\u53f0\u3001Ctf-docker-template\u5bb9\u5668\u5316\u6846\u67b6\u548cDVWA\u6f0f\u6d1e\u6f14\u7ec3\u73af\u5883\uff0c\u53ef\u4ee5\u4e3a\u516c\u53f8\u5185\u90e8\u5458\u5de5\u6784\u5efa\u4e00\u4e2a\u5168\u9762\u7684\u7f51\u7edc\u5b89\u5168\u57f9\u8bad\u3001\u5b66\u4e60\u548c\u7ade\u8d5b\u5e73\u53f0\u3002\u8fd9\u4e2a\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\u4e86\u4ece\u57fa\u7840\u77e5\u8bc6\u5b66\u4e60\u5230\u5b9e\u6218\u6f14\u7ec3\u518d\u5230\u7ade\u6280\u6bd4\u8d5b\u7684\u5b8c\u6574\u95ed\u73af\u3002<\/p>\n\n<!--more-->\n\n<h3 class=\"wp-block-heading\" id=\"\u7ec4\u4ef6\u4ecb\u7ecd\">\u7ec4\u4ef6\u4ecb\u7ecd<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>CTFD (Capture The Flag Framework)<\/strong>\n<ul class=\"wp-block-list\">\n<li>\u529f\u80fd\uff1a\u6bd4\u8d5b\u5e73\u53f0\u6846\u67b6\uff0c\u63d0\u4f9b\u9898\u76ee\u7ba1\u7406\u3001\u79ef\u5206\u7cfb\u7edf\u3001\u6392\u884c\u699c\u7b49\u529f\u80fd<\/li>\n\n\n\n<li>\u4f18\u52bf\uff1a\u5f00\u6e90\u3001\u53ef\u6269\u5c55\u3001\u793e\u533a\u652f\u6301\u826f\u597d<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Ctf-docker-template<\/strong>\n<ul class=\"wp-block-list\">\n<li>\u529f\u80fd\uff1a\u5bb9\u5668\u5316CTF\u9898\u76ee\u6a21\u677f\uff0c\u7b80\u5316\u9898\u76ee\u90e8\u7f72<\/li>\n\n\n\n<li>\u4f18\u52bf\uff1a\u6807\u51c6\u5316\u9898\u76ee\u90e8\u7f72\uff0c\u652f\u6301\u591a\u79cd\u9898\u578b\uff0c\u6613\u4e8e\u7ef4\u62a4<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>DVWA (Damn Vulnerable Web Application)<\/strong>\n<ul class=\"wp-block-list\">\n<li>\u529f\u80fd\uff1a\u5305\u542b\u591a\u79cdWeb\u6f0f\u6d1e\u7684\u6f14\u7ec3\u73af\u5883<\/li>\n\n\n\n<li>\u4f18\u52bf\uff1a\u4e13\u4e3a\u5b89\u5168\u57f9\u8bad\u8bbe\u8ba1\uff0c\u6f0f\u6d1e\u79cd\u7c7b\u5168\u9762\uff0c\u96be\u5ea6\u53ef\u8c03<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"\u89e3\u51b3\u65b9\u6848\u67b6\u6784\">\u89e3\u51b3\u65b9\u6848\u67b6\u6784<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>\u5458\u5de5\u8bbf\u95ee\u5c42\n\u251c\u2500 Web\u754c\u9762 (CTFD\u5e73\u53f0)\n\u251c\u2500 \u57f9\u8bad\u5b66\u4e60\u533a (DVWA\u73af\u5883)\n\u2514\u2500 \u6bd4\u8d5b\u7ade\u6280\u533a (CTF\u9898\u76ee)\n\n\u670d\u52a1\u5c42\n\u251c\u2500 CTFD\u6838\u5fc3\u670d\u52a1\n\u251c\u2500 Docker\u5bb9\u5668\u7ba1\u7406 (Ctf-docker-template)\n\u2502  \u251c\u2500 Web\u9898\u76ee\u5bb9\u5668\n\u2502  \u251c\u2500 Pwn\u9898\u76ee\u5bb9\u5668\n\u2502  \u2514\u2500 \u9006\u5411\u9898\u76ee\u5bb9\u5668\n\u2514\u2500 DVWA\u5bb9\u5668\n\n\u57fa\u7840\u8bbe\u65bd\u5c42\n\u251c\u2500 Docker\u5f15\u64ce\n\u251c\u2500 \u6570\u636e\u5e93\n\u2514\u2500 \u7f51\u7edc\u670d\u52a1\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"\u5b9e\u65bd\u6b65\u9aa4\">\u5b9e\u65bd\u6b65\u9aa4<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"\u73af\u5883\u90e8\u7f72\">1. \u73af\u5883\u90e8\u7f72<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code># \u90e8\u7f72CTFD\ngit clone https:\/\/github.com\/CTFd\/CTFd.git\ncd CTFd\ndocker-compose up -d\n\n# \u90e8\u7f72ctf-docker-template\ngit clone https:\/\/github.com\/CTFd\/ctf-docker-template.git\ncd ctf-docker-template\n# \u6839\u636e\u9700\u6c42\u4fee\u6539\u9898\u76ee\u914d\u7f6e\u540e\ndocker-compose build\ndocker-compose up -d\n\n# \u90e8\u7f72DVWA\ndocker pull vulnerables\/web-dvwa\ndocker run -d -p 80:80 --name dvwa vulnerables\/web-dvwa\n<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"\u5e73\u53f0\u6574\u5408\">2. \u5e73\u53f0\u6574\u5408<\/h4>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u5c06DVWA\u4f5c\u4e3a&#8221;\u57f9\u8bad\u6a21\u5f0f&#8221;\u96c6\u6210\u5230CTFD\u5e73\u53f0\u4e2d<\/li>\n\n\n\n<li>\u4f7f\u7528ctf-docker-template\u521b\u5efa\u9002\u5408\u4e0d\u540c\u6280\u80fd\u6c34\u5e73\u7684CTF\u9898\u76ee<\/li>\n\n\n\n<li>\u914d\u7f6eCTFD\u7684\u7528\u6237\u7ec4\u548c\u6743\u9650\uff0c\u533a\u5206\u57f9\u8bad\u5b66\u5458\u548c\u6bd4\u8d5b\u9009\u624b<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"\u5185\u5bb9\u89c4\u5212\">3. \u5185\u5bb9\u89c4\u5212<\/h4>\n\n\n\n<p><strong>\u57f9\u8bad\u9636\u6bb5:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u4f7f\u7528DVWA\u8fdb\u884c\u57fa\u7840\u6f0f\u6d1e\u5b66\u4e60<\/li>\n\n\n\n<li>\u4ece\u7b80\u5355\u5230\u590d\u6742\u9010\u6b65\u89e3\u9501\u6f0f\u6d1e\u7c7b\u578b<\/li>\n\n\n\n<li>\u914d\u5957\u7406\u8bba\u6750\u6599\u548c\u5b9e\u64cd\u6307\u5bfc<\/li>\n<\/ul>\n\n\n\n<p><strong>\u6bd4\u8d5b\u9636\u6bb5:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u521d\u7ea7: Web\u57fa\u7840\u3001\u7b80\u5355\u9006\u5411<\/li>\n\n\n\n<li>\u4e2d\u7ea7: \u590d\u6742Web\u6f0f\u6d1e\u3001\u4e8c\u8fdb\u5236\u6f0f\u6d1e<\/li>\n\n\n\n<li>\u9ad8\u7ea7: \u6df7\u5408\u6f0f\u6d1e\u5229\u7528\u3001\u771f\u5b9e\u573a\u666f\u6a21\u62df<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"\u8fd0\u8425\u6a21\u5f0f\">\u8fd0\u8425\u6a21\u5f0f<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>\u65e5\u5e38\u57f9\u8bad<\/strong>\n<ul class=\"wp-block-list\">\n<li>\u5b9a\u671f\u5f00\u653eDVWA\u73af\u5883\u4f9b\u5458\u5de5\u7ec3\u4e60<\/li>\n\n\n\n<li>\u6309\u90e8\u95e8\/\u6280\u80fd\u6c34\u5e73\u5206\u7ec4\u5b66\u4e60<\/li>\n\n\n\n<li>\u8bb0\u5f55\u5b66\u4e60\u8fdb\u5ea6\u548c\u6210\u679c<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>\u5b63\u5ea6\u6311\u6218\u8d5b<\/strong>\n<ul class=\"wp-block-list\">\n<li>\u4f7f\u7528CTFD\u4e3e\u529e\u4fe1\u606f\u4e2d\u5fc3\u5185\u90e8CTF\u6bd4\u8d5b<\/li>\n\n\n\n<li>\u8bbe\u7f6e\u4e0d\u540c\u96be\u5ea6\u9898\u76ee<\/li>\n\n\n\n<li>\u5956\u52b1\u8868\u73b0\u4f18\u79c0\u8005<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>\u5e74\u5ea6\u5927\u8d5b<\/strong>\n<ul class=\"wp-block-list\">\n<li>\u7efc\u5408\u6027\u7684\u5b89\u5168\u7ade\u8d5b<\/li>\n\n\n\n<li>\u6a21\u62df\u771f\u5b9e\u653b\u9632\u573a\u666f<\/li>\n\n\n\n<li>\u53ef\u6839\u636e\u516c\u53f8\u5b9e\u9645\u60c5\u51b5\u7ec4\u7ec7\u8de8\u90e8\u95e8\u6bd4\u8d5b<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"\u4f18\u52bf\u4e0e\u4ef7\u503c\">\u4f18\u52bf\u4e0e\u4ef7\u503c<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>\u4e00\u4f53\u5316\u5e73\u53f0<\/strong>\uff1a\u5b66\u4e60\u3001\u7ec3\u4e60\u3001\u6bd4\u8d5b\u5168\u6d41\u7a0b\u8986\u76d6<\/li>\n\n\n\n<li><strong>\u7075\u6d3b\u6269\u5c55<\/strong>\uff1a\u53ef\u6839\u636e\u9700\u6c42\u6dfb\u52a0\u65b0\u9898\u76ee\u548c\u57f9\u8bad\u5185\u5bb9<\/li>\n\n\n\n<li><strong>\u5b9e\u6218\u5bfc\u5411<\/strong>\uff1a\u57fa\u4e8e\u771f\u5b9e\u6f0f\u6d1e\u548c\u653b\u51fb\u6280\u672f<\/li>\n\n\n\n<li><strong>\u6570\u636e\u9a71\u52a8<\/strong>\uff1a\u901a\u8fc7\u5e73\u53f0\u6536\u96c6\u5b66\u4e60\u6570\u636e\uff0c\u4f18\u5316\u57f9\u8bad\u65b9\u6848<\/li>\n\n\n\n<li><strong>\u6210\u672c\u6548\u76ca<\/strong>\uff1a\u5168\u90e8\u57fa\u4e8e\u5f00\u6e90\u65b9\u6848\uff0c\u7ef4\u62a4\u6210\u672c\u4f4e<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"\u7ef4\u62a4\u4e0e\u5347\u7ea7\">\u7ef4\u62a4\u4e0e\u5347\u7ea7<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u6839\u636e\u5e74\u5ea6\u7f51\u7edc\u5b89\u5168\u91cd\u70b9\u5de5\u4f5c\u4e0e\u76d1\u7ba1\u65b9\u5411\u5b9a\u671f\u66f4\u65b0\u9898\u76ee\u548c\u6f0f\u6d1e\u73af\u5883<\/li>\n\n\n\n<li>\u6839\u636e\u53c2\u4e0e\u57f9\u8bad\u4e0e\u6bd4\u8d5b\u7684\u5458\u5de5\u53cd\u9988\u8c03\u6574\u96be\u5ea6\u66f2\u7ebf<\/li>\n\n\n\n<li>\u901a\u8fc7IT\u8fd0\u7ef4\u76d1\u63a7\u5e73\u53f0\u6027\u80fd\u548c\u5b89\u5168<\/li>\n\n\n\n<li>\u5907\u4efd\u5173\u952e\u6570\u636e\u548c\u914d\u7f6e<\/li>\n<\/ol>\n\n\n\n<p>\u6b64\u89e3\u51b3\u65b9\u6848\u53ef\u6839\u636e\u516c\u53f8\u7f51\u7edc\u5b89\u5168\u5b9e\u9645\u60c5\u51b5\u4e0e\u5177\u4f53\u9700\u6c42\u8fdb\u884c\u8c03\u6574\uff0c\u786e\u4fdd\u65e2\u80fd\u6ee1\u8db3\u5b89\u5168\u57f9\u8bad\u7684\u57fa\u672c\u8981\u6c42\uff0c\u53c8\u80fd\u6fc0\u53d1\u5458\u5de5\u7684\u5b66\u4e60\u5174\u8da3\u548c\u7ade\u4e89\u610f\u8bc6\uff0c\u63d0\u9ad8\u516c\u53f8\u5458\u5de5\u7f51\u7edc\u5b89\u5168\u610f\u8bc6\u4e0e\u6280\u80fd\u6c34\u5e73\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u65b9\u6848\u6982\u8ff0 \u7ed3\u5408CTFD\u5e73\u53f0\u3001Ctf-docker-template\u5bb9\u5668\u5316\u6846\u67b6\u548cDVWA\u6f0f\u6d1e\u6f14\u7ec3\u73af\u5883\uff0c\u53ef\u4ee5\u4e3a\u516c\u53f8 &hellip; <a href=\"https:\/\/www.liujh168.com\/index.php\/2024\/11\/05\/webctf-2\/\" class=\"more-link\">\u7ee7\u7eed\u9605\u8bfb<span class=\"screen-reader-text\">\u201c\u6784\u5efa\u516c\u53f8\u7f51\u7edc\u5b89\u5168\u57f9\u8bad\u5b66\u4e60\u548c\u7ade\u8d5b\u5e73\u53f0\u201d<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41,1],"tags":[],"class_list":["post-1553","post","type-post","status-publish","format-standard","hentry","category-uncategorized","category-unknown"],"_links":{"self":[{"href":"https:\/\/www.liujh168.com\/index.php\/wp-json\/wp\/v2\/posts\/1553","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.liujh168.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.liujh168.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.liujh168.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.liujh168.com\/index.php\/wp-json\/wp\/v2\/comments?post=1553"}],"version-history":[{"count":0,"href":"https:\/\/www.liujh168.com\/index.php\/wp-json\/wp\/v2\/posts\/1553\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.liujh168.com\/index.php\/wp-json\/wp\/v2\/media?parent=1553"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.liujh168.com\/index.php\/wp-json\/wp\/v2\/categories?post=1553"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.liujh168.com\/index.php\/wp-json\/wp\/v2\/tags?post=1553"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}