{"id":3573,"date":"2026-04-09T08:57:45","date_gmt":"2026-04-09T00:57:45","guid":{"rendered":"https:\/\/www.sanjiuctf.cn\/?p=3573"},"modified":"2026-04-09T08:57:46","modified_gmt":"2026-04-09T00:57:46","slug":"gzctf%e7%9a%84%e6%90%ad%e5%bb%ba%e5%92%8cctf%e9%a2%98%e7%9b%ae%e7%9a%84%e5%87%ba%e9%a2%98","status":"publish","type":"post","link":"https:\/\/www.sanjiuctf.cn\/?p=3573","title":{"rendered":"GZCTF\u7684\u642d\u5efa\u548cCTF\u9898\u76ee\u7684\u51fa\u9898"},"content":{"rendered":"\n<p>\u5199\u7684\u5982\u679c\u4e0d\u597d\u89c1\u8c05\uff0c\u4f5c\u8005\u6c34\u5e73\u6709\u9650<\/p>\n\n\n\n<p>\u9879\u76ee\u5730\u5740<\/p>\n\n\n\n<p><a href=\"https:\/\/github.com\/GZTimeWalker\/GZCTF\">GitHub &#8211; GZTimeWalker\/GZCTF: The GZ::CTF project, an open source CTF platform. \u00b7 GitHub<\/a><\/p>\n\n\n\n<p>\u5e73\u53f0\u914d\u7f6e\u624b\u518c \u5730\u5740:<a href=\"https:\/\/gzctf.gzti.me\/zh\/guide\/start\/quick-start.html\">\u5feb\u901f\u4e0a\u624b &#8211; GZ::CTF<\/a><\/p>\n\n\n\n<p>GZCTF\u662fdocker\u642d\u5efa\u7684<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e0b\u8f7ddocker<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>curl -fsSL https:\/\/get.docker.com -o get-docker.sh\nsh get-docker.sh\nsystemctl enable docker\nsystemctl start docker<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-172-1024x499.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"499\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-172-1024x499.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3574\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u521b\u5efa GZCTF \u76ee\u5f55\u53ca\u914d\u7f6e\u6587\u4ef6\u548c\u90ae\u7bb1\u9a8c\u8bc1<\/h2>\n\n\n\n<p>\u53ef\u4ee5\u4e0d\u7528\u90ae\u7bb1<\/p>\n\n\n\n<p>\u6211\u7528\u7684\u662fQQ\u90ae\u7bb1\u7684STMP\u670d\u52a1 \u53ef\u4ee5\u81ea\u5df1\u5f00\u542f\u5c31\u884c\u4e86 \u4e0d\u5efa\u8bae\u4f7f\u7528SMTP\uff0c\u53ef\u4ee5\u7528\u817e\u8baf\u4e91\u6216\u8005\u963f\u91cc\u4e91\u670d\u52a1\u5668\u91cc\u9762\u7684\u90ae\u4ef6\u63a8\u9001\u670d\u52a1\uff0c\u53cd\u6b63QQ\u90a3\u4e2aSMTP\u5c31\u524d\u9762\u51e0\u6b21\u53ef\u4ee5\u53d1\u9001\u6210\u529f\u540e\u9762\u76f4\u63a5\u5c31\u4e0d\u884c\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-173-1024x245.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"245\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-173-1024x245.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3575\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>mkdir -p \/opt\/gzctf\ncd \/opt\/gzctf<\/code><\/pre>\n\n\n\n<p>\u521b\u5efa <code>appsettings.json<\/code> \u6587\u4ef6<\/p>\n\n\n\n<p>\u5728\u7ec8\u7aef\u8f93\u5165 <code>nano appsettings.json<\/code> \u6211\u5f00\u7684\u6709\u90ae\u7bb1\u9a8c\u8bc1\u7528\u7684QQ\u7684<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>{\n  \"AllowedHosts\": \"*\",\n  \"ConnectionStrings\": {\n    \"Database\": \"Host=db:5432;Database=gzctf;Username=postgres;Password=&lt;\u4f60\u7684\u6570\u636e\u5e93\u5bc6\u7801&gt;\"\n  },\n  \"EmailConfig\": {\n    \"SenderAddress\": \"&lt;\u53d1\u4ef6\u4eba\u90ae\u7bb1\u5730\u5740&gt;\",\n    \"SenderName\": \"&lt;\u53d1\u4ef6\u4eba\u663e\u793a\u540d\u79f0&gt;\",\n    \"UserName\": \"&lt;SMTP\u7528\u6237\u540d&gt;\",\n    \"Password\": \"&lt;SMTP\u6388\u6743\u7801\/\u5bc6\u7801&gt;\",\n    \"Smtp\": {\n      \"Host\": \"&lt;SMTP\u670d\u52a1\u5668\u5730\u5740&gt;\",\n      \"Port\": 465\n    }\n  },\n  \"XorKey\": \"&lt;\u7528\u4e8e\u52a0\u5bc6\u9898\u76ee\u79c1\u94a5\u7684\u968f\u673a\u5b57\u7b26\u4e32&gt;\",\n  \"ContainerProvider\": {\n    \"Type\": \"Docker\", \/\/ \u5bb9\u5668\u540e\u7aef\u7c7b\u578b\uff1a\u53ef\u9009 Docker \u6216 Kubernetes\n    \"PortMappingType\": \"Default\", \/\/ \u7aef\u53e3\u6620\u5c04\u6a21\u5f0f\uff1a\u53ef\u9009 Default \u6216 PlatformProxy\n    \"EnableTrafficCapture\": false, \/\/ \u662f\u5426\u542f\u7528\u6d41\u91cf\u6293\u53d6\n    \"PublicEntry\": \"&lt;\u670d\u52a1\u5668\u516c\u7f51IP\u6216\u57df\u540d&gt;\", \/\/ \u9009\u624b\u8bbf\u95ee\u9898\u76ee\u5bb9\u5668\u7684\u5165\u53e3\u5730\u5740\n    \"DockerConfig\": {\n      \"Uri\": \"unix:\/\/\/var\/run\/docker.sock\" \/\/ Docker \u5b88\u62a4\u8fdb\u7a0b\u8fde\u63a5\u8def\u5f84\n    }\n  },\n  \"CaptchaConfig\": {\n    \"Provider\": \"None\", \/\/ \u9a8c\u8bc1\u7801\u7c7b\u578b\uff1a\u53ef\u9009 None, CloudflareTurnstile \u6216 HashPow\n    \"SiteKey\": \"&lt;\u9a8c\u8bc1\u7801 SiteKey&gt;\",\n    \"SecretKey\": \"&lt;\u9a8c\u8bc1\u7801 SecretKey&gt;\"\n  },\n  \"ForwardedOptions\": {\n    \"ForwardedHeaders\": 7,\n    \"ForwardLimit\": 1,\n    \"KnownIPNetworks\": &#91;\"192.168.12.0\/8\"] \/\/ \u4fe1\u4efb\u7684\u53cd\u5411\u4ee3\u7406\u5185\u7f51\u6bb5\n  }\n}<\/code><\/pre>\n\n\n\n<p>\u4fdd\u5b58\u5e76\u9000\u51fa\uff1a\u6309 Ctrl+O\u56de\u8f66\u4fdd\u5b58\uff0c\u7136\u540e\u6309 Ctrl+X\u9000\u51fa<\/p>\n\n\n\n<p>\u521b\u5efa <code>nano compose.yml<\/code><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>services:\n  gzctf:\n    image: registry.cn-shanghai.aliyuncs.com\/gztime\/gzctf:develop\n    restart: always\n    environment:\n      - \"GZCTF_ADMIN_PASSWORD=&lt;\u4f60\u7684\u521d\u59cb\u7ba1\u7406\u5458\u5bc6\u7801&gt;\" # \u6570\u636e\u5e93\u672a\u521d\u59cb\u5316\u65f6\u7684\u9996\u4e2a\u7ba1\u7406\u5458\u5bc6\u7801\n      - \"LC_ALL=zh_CN.UTF-8\" # \u5e73\u53f0\u8bed\u8a00\u8bbe\u7f6e\uff0c\u9ed8\u8ba4\u4e3a\u4e2d\u6587\n    ports:\n      - \"80:8080\" # \u5c06\u5bb9\u5668 8080 \u7aef\u53e3\u6620\u5c04\u5230\u5bbf\u4e3b\u673a 80 \u7aef\u53e3\n    volumes:\n      - \".\/data\/files:\/app\/files\" # \u9898\u76ee\u9644\u4ef6\u53ca\u9759\u6001\u6587\u4ef6\u5b58\u50a8\u76ee\u5f55\n      - \".\/appsettings.json:\/app\/appsettings.json:ro\" # \u6302\u8f7d\u914d\u7f6e\u6587\u4ef6\uff08\u53ea\u8bfb\uff09\n      - \"\/var\/run\/docker.sock:\/var\/run\/docker.sock\" # \u5141\u8bb8\u5e73\u53f0\u63a7\u5236\u5bbf\u4e3b\u673a Docker \u73af\u5883\n    depends_on:\n      - db # \u786e\u4fdd\u6570\u636e\u5e93\u670d\u52a1\u4f18\u5148\u542f\u52a8\n\n  db:\n    image: postgres:alpine\n    restart: always\n    environment:\n      - \"POSTGRES_PASSWORD=&lt;\u4f60\u7684\u6570\u636e\u5e93\u5bc6\u7801&gt;\" # \u987b\u4e0e appsettings.json \u4e2d\u7684\u5bc6\u7801\u4fdd\u6301\u4e00\u81f4\n    volumes:\n      - \".\/data\/db:\/var\/lib\/postgresql\" # \u6570\u636e\u5e93\u6570\u636e\u6301\u4e45\u5316\u76ee\u5f55<\/code><\/pre>\n\n\n\n<p>\u914d\u7f6e\u597d\u4e86\u542f\u52a8\u5c31\u884c<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker compose up -d<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-174-1024x84.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"84\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-174-1024x84.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3576\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u6709\u95ee\u9898\u963f\u91cc\u4e91\u955c\u50cf\u52a0\u901f<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>mkdir -p \/etc\/docker\ntee \/etc\/docker\/daemon.json &lt;&lt;-'EOF'\n{\n  \"registry-mirrors\": &#91;\n    \"https:\/\/docker.1panel.live\",\n    \"https:\/\/docker.m.daocloud.io\",\n    \"https:\/\/dockerhub.icu\",\n    \"https:\/\/registry.cn-hangzhou.aliyuncs.com\"\n  ]\n}\nEOF\nsystemctl daemon-reload\nsystemctl restart docker<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-175.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"149\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-175.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3577\"  sizes=\"auto, (max-width: 768px) 100vw, 768px\" \/><\/div><\/figure>\n\n\n\n<p>\u9700\u8981\u5f00\u542f\u7cfb\u7edf\u7684\u7f51\u7edc\u8f6c\u53d1\u529f\u80fd<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo sysctl -w net.ipv4.ip_forward=1<\/code><\/pre>\n\n\n\n<p>\u5f3a\u5236\u9632\u706b\u5899\u653e\u884c Docker \u7684\u6d41\u91cf<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo iptables -P FORWARD ACCEPT<\/code><\/pre>\n\n\n\n<p>\u6210\u529f \u8bbf\u95ee<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-176-1024x557.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"557\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-176-1024x557.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3578\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u7136\u540e\u7528\u8bbe\u7f6e\u7684\u7ba1\u7406\u5458\u767b\u5f55\u5c31\u884c<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-177-1024x98.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"98\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-177-1024x98.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3579\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5f00\u542f\u90ae\u7bb1\u9a8c\u8bc1 \u5c31\u53ef\u4ee5\u53d1\u90ae\u7bb1\u9a8c\u8bc1\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-178.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"420\" height=\"621\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-178.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3580\"  sizes=\"auto, (max-width: 420px) 100vw, 420px\" \/><\/div><\/figure>\n\n\n\n<p>\u4e0d\u5efa\u8bae\u7528STMP \u4e0d\u77e5\u9053\u4ec0\u4e48\u60c5\u51b5\u4e00\u76f4\u51fa\u73b0\u95ee\u9898 \u540e\u9762\u6211\u5c31\u7981\u7528\u90ae\u4ef6\u9a8c\u8bc1\u4e86<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u9a8c\u8bc1\u7801<\/h2>\n\n\n\n<p>\u4e2a\u4eba\u7528\u4e0d\u5230<\/p>\n\n\n\n<p>\u53ef\u4ee5\u7528cloudflare \u5b98\u7f51<a href=\"https:\/\/dash.cloudflare.com\/\">Cloudflare Dashboard | Manage Your Account<\/a><\/p>\n\n\n\n<p>\u4fee\u6539appsettings<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\"CaptchaConfig\": {\n    \"Provider\": \"CloudflareTurnstile\",\n    \"SiteKey\": \"key\",\n    \"SecretKey\": \"key\",<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-179-1024x536.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"536\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-179-1024x536.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3581\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Web\u51fa\u9898\u548c\u52a8\u6001 flag<\/h2>\n\n\n\n<p>GZCTF\u52a8\u6001flag \u53d8\u91cf\u662fGZCTF_FLAG<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-180-1024x566.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"566\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-180-1024x566.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3582\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u52a8\u6001 flag \u7684\u6838\u5fc3\u903b\u8f91\u662f\uff1a<strong>\u5e73\u53f0\u5728\u542f\u52a8\u9898\u76ee\u5bb9\u5668\u65f6\uff0c\u4f1a\u5c06 flag \u6ce8\u5165\u5230\u73af\u5883\u53d8\u91cf <code>GZCTF_FLAG<\/code> \u4e2d\u3002<\/strong> \u5199\u4e00\u4e2a\u542f\u52a8\u811a\u672c\uff08<code>flag.sh<\/code>\uff09\uff0c\u5728\u5bb9\u5668\u542f\u52a8\u7684\u4e00\u77ac\u95f4\uff0c\u628a\u8fd9\u4e2a\u73af\u5883\u53d8\u91cf\u91cc\u7684\u503c\u5199\u5230\u6587\u4ef6\u91cc\u6216\u8005\u6570\u636e\u5e93\u91cc\u5c31\u884c<\/p>\n\n\n\n<p>\u968f\u4fbf\u5199\u4e00\u4e0b\u9898\u76ee<\/p>\n\n\n\n<p>\u76ee\u5f55\u7ed3\u6784<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/opt\/ctf\/\n\u251c\u2500\u2500 Dockerfile\n\u251c\u2500\u2500 flag.sh\n\u2514\u2500\u2500 src\/\n    \u2514\u2500\u2500 index.php<\/code><\/pre>\n\n\n\n<p>index.php (\u9898\u76ee\u6e90\u7801)<\/p>\n\n\n\n<p>\u8fd9\u662f\u9898\u76ee\u9875\u9762\u3002\u51fa\u9898\u903b\u8f91\u662f\uff1a\u5728\u9875\u9762\u6e90\u7801\u4e2d\u9884\u7559\u4e00\u4e2a\u5360\u4f4d\u7b26\uff0c\u542f\u52a8\u5bb9\u5668\u65f6\u7531\u811a\u672c\u52a8\u6001\u66ff\u6362<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;!DOCTYPE html&gt;\n&lt;html lang=\"zh-CN\"&gt;\n&lt;head&gt;\n    &lt;meta charset=\"UTF-8\"&gt;\n    &lt;title&gt;Web \u7b7e\u5230&lt;\/title&gt;\n&lt;\/head&gt;\n&lt;body&gt;\n    &lt;h1&gt;Welcome to GZCTF&lt;\/h1&gt;\n    &lt;p&gt;\u8fd9\u662f\u4e00\u9053\u7b7e\u5230\u9898\uff0c\u4f60\u7684 flag \u662f\uff1a&lt;\/p&gt;\n    &lt;code&gt;{{FLAG}}&lt;\/code&gt;\n&lt;\/body&gt;\n&lt;\/html&gt;<\/code><\/pre>\n\n\n\n<p>flag.sh (\u542f\u52a8\u811a\u672c)<\/p>\n\n\n\n<p>\u8fd9\u4e2a\u811a\u672c\u8d1f\u8d23\u201c\u52a8\u6001\u6ce8\u5165\u201d\u3002GZCTF \u5206\u914d flag \u65f6\u4f1a\u5199\u5165 <code>$GZCTF_FLAG<\/code> \u73af\u5883\u53d8\u91cf\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>#!\/bin\/sh\n\n# 1. \u63a5\u6536\u52a8\u6001\u53d8\u91cf\uff0c\u82e5\u5e73\u53f0\u672a\u4e0b\u53d1\u5219\u4f7f\u7528\u9ed8\u8ba4\u503c flag{sanjiu}\nexport FLAG=${GZCTF_FLAG:-flag{sanjiu}}\n\n# 2. \u5c06\u6e90\u7801\u4e2d\u7684\u5360\u4f4d\u7b26\u66ff\u6362\u4e3a\u771f\u5b9e Flag\nsed -i \"s\/{{FLAG}}\/$FLAG\/g\" \/var\/www\/html\/index.php\n\n# 3. \u5f7b\u5e95\u9500\u6bc1\u73af\u5883\u53d8\u91cf\uff0c\u9632\u6b62\u9009\u624b\u901a\u8fc7 \/proc\/1\/environ \u6216 phpinfo() \u63d0\u6743\/\u975e\u9884\u671f\u8bfb\u53d6\nunset GZCTF_FLAG\nunset FLAG\n\n# 4. \u542f\u52a8 Apache \u670d\u52a1\u5e76\u63a5\u7ba1\u4e3b\u8fdb\u7a0b\nexec apache2-foreground<\/code><\/pre>\n\n\n\n<p>Dockerfile<\/p>\n\n\n\n<p>\u8fd9\u91cc\u4f7f\u7528\u4e86\u963f\u91cc\u4e91\u955c\u50cf\u6e90\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># \u57fa\u7840\u955c\u50cf\u4f7f\u7528\u5b98\u65b9 PHP-Apache\nFROM php:7.4-apache\n\n# \u66ff\u6362 Debian \u8f6f\u4ef6\u6e90\u4e3a\u963f\u91cc\u4e91\u6e90\uff0c\u52a0\u901f\u540e\u7eed\u53ef\u80fd\u9700\u8981\u7684\u6269\u5c55\u5b89\u88c5\nRUN sed -i 's\/deb.debian.org\/mirrors.aliyun.com\/g' \/etc\/apt\/sources.list &amp;&amp; \n    sed -i 's\/security.debian.org\/mirrors.aliyun.com\/g' \/etc\/apt\/sources.list\n\n# \u62f7\u8d1d Web \u6e90\u7801\u5230 Apache \u9ed8\u8ba4\u76ee\u5f55\nCOPY src\/ \/var\/www\/html\/\n\n# \u62f7\u8d1d\u5e76\u914d\u7f6e\u542f\u52a8\u811a\u672c\nCOPY flag.sh \/flag.sh\nRUN chmod +x \/flag.sh\n\n# \u66b4\u9732 80 \u7aef\u53e3\u4f9b\u5e73\u53f0\u6620\u5c04\nEXPOSE 80\n\n# \u6307\u5b9a\u5bb9\u5668\u542f\u52a8\u547d\u4ee4\nCMD &#91;\"\/flag.sh\"]<\/code><\/pre>\n\n\n\n<p><strong>\u6784\u5efa\u955c\u50cf<\/strong>\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker build -t web .<\/code><\/pre>\n\n\n\n<p>\u6709\u95ee\u9898\u6539\u4e00\u4e0b\u5168\u5c40\u914d\u7f6e<\/p>\n\n\n\n<p>\u914d\u7f6e\u591a\u4e2a\u56fd\u5185\u76ee\u524d\u8fd8\u5b58\u6d3b\u7684\u52a0\u901f\u6e90<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo mkdir -p \/etc\/docker\nsudo tee \/etc\/docker\/daemon.json &lt;&lt;-'EOF'\n{\n  \"registry-mirrors\": &#91;\n    \"https:\/\/docker.1panel.live\",\n    \"https:\/\/docker.m.daocloud.io\",\n    \"https:\/\/docker.nyist.machengqiang.com\"\n  ]\n}\nEOF<\/code><\/pre>\n\n\n\n<p>\u91cd\u542f Docker \u670d\u52a1\u8ba9\u914d\u7f6e\u751f\u6548<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl daemon-reload\nsudo systemctl restart docker<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-181.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"981\" height=\"546\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-181.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3583\"  sizes=\"auto, (max-width: 981px) 100vw, 981px\" \/><\/div><\/figure>\n\n\n\n<p>\u521b\u5efa\u9898\u76ee\u52a8\u6001flag<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-182.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"688\" height=\"414\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-182.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3584\"  sizes=\"auto, (max-width: 688px) 100vw, 688px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-183-1024x475.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"475\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-183-1024x475.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3585\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u6211\u66b4\u9732\u7684\u662f80\u7aef\u53e3\u76f4\u63a5\u752880\u7aef\u53e3\u5c31\u884c<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-184-1024x446.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"446\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-184-1024x446.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3586\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u8bbe\u7f6e<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>flag{&#91;GUID]} #\u4e0d\u4e00\u5b9a\u662fflag \u4e5f\u53ef\u4ee5\u662f CTF{&#91;GUID]}<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-185.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"825\" height=\"350\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-185.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3587\"  sizes=\"auto, (max-width: 825px) 100vw, 825px\" \/><\/div><\/figure>\n\n\n\n<p>\u4f60\u5c31\u4f1a\u53d1\u73b0\u662f\u52a8\u6001flag\u4e86<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Pwn\u7684\u51fa\u9898\u548c\u52a8\u6001flag<\/h2>\n\n\n\n<p>\u7b80\u5355\u7f16\u5199\u4e00\u4e2a\u7b80\u5355\u7684 C \u7a0b\u5e8f\uff08\u6267\u884c <code>\/bin\/sh<\/code>\uff09\uff0c\u5e76\u4f7f\u7528 <code>socat<\/code> \u5c06\u5176\u7ed1\u5b9a\u5230 80 \u7aef\u53e3\u4e0a\u6765\u5b9e\u73b0\u3002<\/p>\n\n\n\n<p>\u76ee\u5f55\u7ed3\u6784<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>pwn\/\n\u251c\u2500\u2500 Dockerfile\n\u251c\u2500\u2500 flag.sh\n\u2514\u2500\u2500 src\/\n    \u2514\u2500\u2500 pwn.c<\/code><\/pre>\n\n\n\n<p>pwn.c<\/p>\n\n\n\n<p>\u7b80\u5355\u7684 pwn \u7b7e\u5230\u6e90\u7801\uff0c\u4f5c\u7528\u662f\u76f4\u63a5\u5f39\u51fa\u4e00\u4e2a shell\u3002\u6ce8\u610f\uff1apwn \u9898\u5fc5\u987b\u5173\u95ed I\/O \u7f13\u51b2\uff0c\u5426\u5219\u901a\u8fc7\u7f51\u7edc\u8fde\u63a5\u65f6\u4f1a\u65e0\u6cd5\u6b63\u5e38\u8f93\u5165\u8f93\u51fa\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>#include &lt;stdio.h&gt;\n#include &lt;stdlib.h&gt;\n\nint main() {\n    \/\/ \u5173\u95ed I\/O \u7f13\u51b2\uff08\u9632\u6b62\u7f51\u7edc\u622a\u65ad\uff09\n    setvbuf(stdin, NULL, _IONBF, 0);\n    setvbuf(stdout, NULL, _IONBF, 0);\n    setvbuf(stderr, NULL, _IONBF, 0);\n\n    puts(\"Welcome to GZCTF Pwn Signin!\");\n    puts(\"\u7b80\u5355\u7684\u6f14\u793a!\u563b\u563b\u563b\");\n\n    \/\/ \u76f4\u63a5\u7ed9\u4e88 shell\n    system(\"\/bin\/sh\");\n\n    return 0;\n}<\/code><\/pre>\n\n\n\n<p>flag.sh (\u542f\u52a8\u4e0e\u52a8\u6001 flag \u811a\u672c)<\/p>\n\n\n\n<p>\u8d1f\u8d23\u5c06 GZCTF \u4e0b\u53d1\u7684\u53d8\u91cf\u5199\u5165\u6839\u76ee\u5f55\uff0c\u968f\u540e\u6e05\u7a7a\u53d8\u91cf\u5e76\u542f\u52a8\u7aef\u53e3\u76d1\u542c\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>#!\/bin\/sh\n\n# 1. \u63a5\u6536\u52a8\u6001\u53d8\u91cf\uff0c\u82e5\u5e73\u53f0\u672a\u4e0b\u53d1\u5219\u4f7f\u7528\u9ed8\u8ba4\u503c flag{sanjiu}\necho \"${GZCTF_FLAG:-flag{sanjiu}}\" &gt; \/flag\n\n# 2. \u4fee\u6539 flag \u6587\u4ef6\u6743\u9650\u4e3a\u5168\u5c40\u53ea\u8bfb\uff0c\u9632\u6b62\u88ab\u9009\u624b\u610f\u5916\u4fee\u6539\u6216\u5220\u9664\nchmod 444 \/flag\n\n# 3. \u5f7b\u5e95\u9500\u6bc1\u73af\u5883\u53d8\u91cf\uff0c\u9632\u6b62\u9009\u624b\u76f4\u63a5\u8fd0\u884c env \u547d\u4ee4\u975e\u9884\u671f\u62ff\u5230 flag\nunset GZCTF_FLAG\n\n# 4. \u5207\u6362\u5230\u4f4e\u6743\u9650\u7528\u6237 ctf\uff0c\u4f7f\u7528 socat \u76d1\u542c 80 \u7aef\u53e3\u5e76\u5c06\u6d41\u91cd\u5b9a\u5411\u5230 pwn \u4e8c\u8fdb\u5236\u6587\u4ef6\n# EXEC \u6a21\u5f0f\u4e0b\uff0c\u6bcf\u6b21\u6709 nc \u8fde\u63a5\u8fdb\u6765\uff0c\u90fd\u4f1a fork \u4e00\u4e2a\u65b0\u7684 pwn \u8fdb\u7a0b\nexec su ctf -c \"socat TCP-LISTEN:80,reuseaddr,fork EXEC:\/home\/ctf\/pwn,stderr\"<\/code><\/pre>\n\n\n\n<p>Dockerfile<\/p>\n\n\n\n<p>\u57fa\u4e8e Ubuntu 22.04\uff0c\u5185\u7f6e\u963f\u91cc\u4e91 APT \u955c\u50cf\u52a0\u901f\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># Pwn \u9898\u901a\u5e38\u4f7f\u7528 Ubuntu \u4f5c\u4e3a\u57fa\u7840\u8fd0\u884c\u73af\u5883\nFROM ubuntu:22.04\n\n# \u66ff\u6362 Ubuntu \u8f6f\u4ef6\u6e90\u4e3a\u963f\u91cc\u4e91\u6e90\uff08\u52a0\u901f\u6784\u5efa\uff0c\u89e3\u51b3\u56fd\u5185 apt update \u5361\u6b7b\u95ee\u9898\uff09\nRUN sed -i 's@\/\/.*archive.ubuntu.com@\/\/mirrors.aliyun.com@g' \/etc\/apt\/sources.list &amp;&amp; \n    sed -i 's\/security.ubuntu.com\/mirrors.aliyun.com\/g' \/etc\/apt\/sources.list\n\n# \u5b89\u88c5 gcc (\u7528\u4e8e\u7f16\u8bd1\u6e90\u7801) \u548c socat (\u7528\u4e8e\u7aef\u53e3\u8f6c\u53d1)\nRUN apt-get update &amp;&amp; \n    DEBIAN_FRONTEND=noninteractive apt-get install -y gcc socat &amp;&amp; \n    rm -rf \/var\/lib\/apt\/lists\/*\n\n# \u521b\u5efa\u4f4e\u6743\u9650\u7528\u6237 ctf (Pwn \u9898\u7edd\u4e0d\u80fd\u7ed9 root \u6743\u9650\u8fd0\u884c\u4e8c\u8fdb\u5236\uff0c\u5426\u5219\u4f1a\u88ab\u6253\u7a7f\u5bbf\u4e3b\u673a)\nRUN useradd -m ctf\n\n# \u5c06\u6e90\u7801\u548c\u542f\u52a8\u811a\u672c\u62f7\u8d1d\u8fdb\u5bb9\u5668\nCOPY src\/pwn.c \/home\/ctf\/pwn.c\nCOPY flag.sh \/flag.sh\n\n# \u7f16\u8bd1 C \u6e90\u7801\uff0c\u5e76\u8bbe\u7f6e\u6743\u9650\u63a7\u5236\nRUN gcc \/home\/ctf\/pwn.c -o \/home\/ctf\/pwn &amp;&amp; \n    chown root:ctf \/home\/ctf\/pwn &amp;&amp; \n    chmod 750 \/home\/ctf\/pwn &amp;&amp; \n    chmod +x \/flag.sh\n\n# \u58f0\u660e\u66b4\u9732 80 \u7aef\u53e3\nEXPOSE 80\n\n# \u5bb9\u5668\u542f\u52a8\u65f6\u6267\u884c\u7684\u811a\u672c\nCMD &#91;\"\/flag.sh\"]<\/code><\/pre>\n\n\n\n<p>\u6784\u5efa\u955c\u50cf<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker build -t pwn .<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-186.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"971\" height=\"538\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-186.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3588\"  sizes=\"auto, (max-width: 971px) 100vw, 971px\" \/><\/div><\/figure>\n\n\n\n<p>\u548c\u524d\u9762\u4e00\u6837\u8bbe\u7f6e<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>flag{&#91;GUID]}<\/code><\/pre>\n\n\n\n<p>\u6211\u8fd8\u662f\u7528\u7684\u662f80\u7aef\u53e3<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-187-1024x485.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"485\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-187-1024x485.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3589\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u542f\u52a8nc\u8fde\u63a5\u5c31\u884c<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-188-1024x526.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"526\" data-original=\"https:\/\/www.sanjiuctf.cn\/wp-content\/uploads\/2026\/04\/image-188-1024x526.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-3590\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">docker \u547d\u4ee4<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>1. \u955c\u50cf\u6784\u5efa\u4e0e\u7ba1\u7406 \n# \u6784\u5efa\u955c\u50cf \ndocker build -t &lt;image_name&gt; .\n# \u5217\u51fa\u672c\u5730\u955c\u50cf \ndocker images\ndocker image ls\n# \u641c\u7d22\u955c\u50cf\ndocker search &lt;image_name&gt;\n# \u4ece\u4ed3\u5e93\u62c9\u53d6\u955c\u50cf\ndocker pull &lt;image_name&gt;:&lt;tag&gt;\n# \u63a8\u9001\u955c\u50cf\u5230\u4ed3\u5e93 \ndocker push &lt;image_name&gt;:&lt;tag&gt;\n# \u67e5\u770b\u955c\u50cf\u8be6\u7ec6\u4fe1\u606f\ndocker inspect &lt;image_name&gt;\n# \u663e\u793a\u955c\u50cf\u5386\u53f2 \ndocker history &lt;image_name&gt;\n# \u7ed9\u955c\u50cf\u6253\u6807\u7b7e\ndocker tag &lt;old_name&gt; &lt;new_name&gt;\n# \u5220\u9664\u955c\u50cf \ndocker rmi &lt;image_name&gt;\ndocker image rm &lt;image_name&gt;\n\n 2. \u5bb9\u5668\u8fd0\u884c\u6d4b\u8bd5 \n# \u8fd0\u884c\u65b0\u5bb9\u5668\ndocker run &#91;options] &lt;image_name&gt;\n# \u540e\u53f0\u8fd0\u884c\u5e76\u6620\u5c04\u7aef\u53e3 \ndocker run -d --name my-container -p 8080:80 &lt;image_name&gt;\n# \u4ea4\u4e92\u6a21\u5f0f\u8fd0\u884c\uff0c\u9000\u51fa\u5373\u711a\ndocker run -it --rm &lt;image_name&gt; \/bin\/bash\n# \u6ce8\u5165\u73af\u5883\u53d8\u91cf\ndocker run -e ENV_VAR=value &lt;image_name&gt;\n\n3. \u5e38\u7528\u57fa\u7840\u670d\u52a1\u542f\u52a8\n# \u8fd0\u884c Nginx \u5bb9\u5668\ndocker run -d --name my-nginx -p 80:80 nginx\n# \u8fd0\u884c MySQL \u5bb9\u5668 (\u6302\u8f7d\u6570\u636e\u5e76\u8bbe\u7f6e root \u5bc6\u7801) \ndocker run -d --name mysql-db -e MYSQL_ROOT_PASSWORD=123456 -v mysql_data:\/var\/lib\/mysql mysql:8.0\n\n4. \u8c03\u8bd5\u4e0e\u6392\u9519\n# \u5217\u51fa\u8fd0\u884c\u4e2d\u7684\u5bb9\u5668 \ndocker ps\n# \u5217\u51fa\u6240\u6709\u5bb9\u5668\uff08\u5305\u62ec\u505c\u6b62\u7684\uff09 \ndocker ps -a\n# \u67e5\u770b\u5bb9\u5668\u65e5\u5fd7\ndocker logs &lt;container_name&gt;\n# \u5b9e\u65f6\u67e5\u770b\u5bb9\u5668\u65e5\u5fd7 \ndocker logs -f &lt;container_name&gt;\n# \u67e5\u770b\u5b9e\u65f6\u65e5\u5fd7\u793a\u4f8b\ndocker logs -f my-nginx\n# \u67e5\u770b\u5bb9\u5668\u8fdb\u7a0b \ndocker top &lt;container_name&gt;\n# \u8fdb\u5165\u8fd0\u884c\u4e2d\u7684\u5bb9\u5668 \ndocker exec -it &lt;container_name&gt; \/bin\/bash\ndocker exec -it &lt;container_name&gt; sh\n# \u8fdb\u5165\u5bb9\u5668\u8c03\u8bd5\u793a\u4f8b\ndocker exec -it my-nginx \/bin\/bash\n\n5. Docker Compose \n# \u6784\u5efa\u670d\u52a1\u955c\u50cf \ndocker-compose build\n# \u542f\u52a8\u670d\u52a1 \ndocker-compose up\n# \u540e\u53f0\u8fd0\u884c\u670d\u52a1 \ndocker-compose up -d\n# \u67e5\u770b\u670d\u52a1\u72b6\u6001 \ndocker-compose ps\n# \u67e5\u770b\u670d\u52a1\u65e5\u5fd7 \ndocker-compose logs\n# \u5b9e\u65f6\u65e5\u5fd7 \ndocker-compose logs -f\n# \u505c\u6b62\u670d\u52a1 \ndocker-compose down\n# \u505c\u6b62\u670d\u52a1\u5e76\u540c\u65f6\u5220\u9664\u5377\ndocker-compose down -v\n\n6.\u73af\u5883\u6e05\u7406\u4e0e\u79bb\u7ebf\u8fc1\u79fb\n# \u5220\u9664\u6784\u5efa\u7f13\u5b58 \ndocker builder prune -f\n# \u6e05\u7406\u6240\u6709\u6784\u5efa\u7f13\u5b58\uff0c\u5305\u62ec\u5931\u8d25\u7684\u6784\u5efa \ndocker builder prune\n# \u6e05\u7406\u6240\u6709\u6784\u5efa\u7f13\u5b58\uff0c\u5305\u62ec\u5185\u90e8\u7f13\u5b58 \ndocker builder prune -a\n# \u5220\u9664\u6240\u6709\u60ac\u7a7a\u955c\u50cf\uff08\u5305\u62ec\u6784\u5efa\u5931\u8d25\u7684\u4e2d\u95f4\u5c42\uff09\ndocker image prune\n# \u5f3a\u5236\u5220\u9664\u6240\u6709\u60ac\u7a7a\u955c\u50cf\ndocker image prune -f\n# \u5220\u9664\u6240\u6709\u672a\u88ab\u4f7f\u7528\u7684\u955c\u50cf\uff08\u8c28\u614e\u4f7f\u7528\uff09 \ndocker image prune -a\n# \u5bfc\u51fa\u955c\u50cf \ndocker save -o &lt;file.tar&gt; &lt;image_name&gt;\n# \u5bfc\u5165\u955c\u50cf \ndocker load -i &lt;file.tar&gt;<\/code><\/pre>\n\n\n\n<p>\u87f9\u87f9\u89c2\u770b<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5199\u7684\u5982\u679c\u4e0d\u597d\u89c1\u8c05\uff0c\u4f5c\u8005\u6c34\u5e73\u6709\u9650 \u9879\u76ee\u5730\u5740 GitHub &#8211; GZTimeWalker\/GZCTF: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":3591,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,1],"tags":[],"class_list":["post-3573","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-4","category-learn"],"_links":{"self":[{"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/posts\/3573","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3573"}],"version-history":[{"count":1,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/posts\/3573\/revisions"}],"predecessor-version":[{"id":3592,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/posts\/3573\/revisions\/3592"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=\/wp\/v2\/media\/3591"}],"wp:attachment":[{"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3573"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3573"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sanjiuctf.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3573"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}