<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>UU&amp;Mixt · Mixt 的一面</title><description>Mixt 的一面：PWN、二进制安全、漏洞分析与 CTF writeup。</description><link>https://uuandmixt.com/</link><language>zh-CN</language><item><title>创宇杯2026</title><link>https://uuandmixt.com/mixt/posts/2026-2/</link><guid isPermaLink="true">https://uuandmixt.com/mixt/posts/2026-2/</guid><description>第一届创宇杯网络安全技能大赛</description><pubDate>Fri, 18 Sep 2026 00:00:00 GMT</pubDate><category>无</category><author>Mixt</author></item><item><title>[强网杯2018]core</title><link>https://uuandmixt.com/mixt/posts/2018-core-2/</link><guid isPermaLink="true">https://uuandmixt.com/mixt/posts/2018-core-2/</guid><description>强网杯2018 core 内核题利用有符号整数溢出造成内核栈溢出，泄露 Canary 后构造 ROP 链执行 commit_creds(prepare_kernel_cred(0)) 完成提权。</description><pubDate>Thu, 17 Sep 2026 00:00:00 GMT</pubDate><category>linux kernel pwn</category><category>linux kernel pwn</category><category>ROP</category><category>栈溢出</category><category>整数溢出</category><author>Mixt</author></item><item><title>libc_stdio_buffer初始化</title><link>https://uuandmixt.com/mixt/posts/libc-stdio-buffer/</link><guid isPermaLink="true">https://uuandmixt.com/mixt/posts/libc-stdio-buffer/</guid><description>利用 stdio 缓冲区延迟分配与 tcache_perthread_struct 操纵，实现任意地址写并泄露 libc，最终改写 mp_.tcache_bins 完成利用。</description><pubDate>Wed, 16 Sep 2026 00:00:00 GMT</pubDate><category>IO_FILE</category><category>libc_stdio_buffer</category><category>tcache_perthread_struct</category><category>mp_</category><author>Mixt</author></item></channel></rss>