After quickly looking through the .pcap, we find two things: a python source file, and a large b64 string ('2Mk16Sk5iakYx...') {% highlight python %} import string import random from base64 import b64encode, b64decode enc_ciphers = ['rot13', 'b64e', 'caesar'] dec_ciphers = ['rot13', '
TL; DR * Overflow * Uninitialized Variable * Format String CSAW CTF was a lot of fun this year (mostly because I was actually able to solve challenges ;D) and solving Contacts was pretty satisfying. Let's start by getting an idea what is up with it: {% highlight bash %} vagrant@precise64:~/csawctf$
TL; DR * Overflow Precision was the lowest point exploitation challenge because it was literally a buffer overflow :3 Let's start by getting an idea what is up with it: {% highlight bash %} vagrant@precise64:~/csawctf$ file precision prec: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked
The first part of the challenge is to find the initals of the club Alex was in university. Googling "Alexander Taylor Raytheon" brings up his LinkedIn, which shows that he went to the University of South Florida and was president of the Whitehatters Computer Security Club. Using the
The site has a maze game that you must navigate through. On the /play tab, it shows a login screen, so an account is needed to play. Registering for an account, it automatically logs you in. The hint is that you need a compass to iwn, which is 10 tokens.
1. We can see a recent bugfix to CTFd, preventing unauthed admin calls at https://github.com/CTFd/CTFd/commit/9578355143d7af675fc4776b0f2de802be91e261. 2. We make a POST request to it with cURL with: curl -da=a https://ctf.isis.poly.edu/admin/chal/new. 3. We get back the flag: flag{
Unzipping the airport file, there are two folders. __MACOSX is automatically generated by OSX and it is irrelevant to the challenge. steghide.jpg is compatible with the steghide tool. Identifying the four airports as: 1st: Jose Marti, Cuba 2nd: HongKong, China 3rd: LAX, USA 4th: Toranto Pearson, Canada The third
Capture The Flags (CTFs) are how the those of us in the computer security industry test both ourselves and each other. This year for CSAW CTF I completely rewrote the website behind the CTF to make it easier for myself and future organizers to administrate. CTFd, as I've
A few weeks ago the CSAW CTF was run from NYU-Poly and over 2500 teams registered to play. We’re releasing most of the CSAW CTF challenges in a VM for those who were not competing to download and try on their own. CSAW Quals 2014 VM - MD5: abc2fd91edc1b4f60a88a4183ce4fbe6
These past few weeks, we participated in Build it Break it Fix it. Our team consisted of Ancat, Blankwall, ColdHeat and Kiwi. Contestants were tasked with writing correct, secure and fast code in the Build it round. Next, the Break it round has them looking for bugs and vulnerabilities in
Analysis This challenge presents us a with 32 bit, ELF executable with debugging information. We connect and see some allocation and freeing happening and can take a reasonable guess as to the fact that there may be a heap overflow. This guess is confirmed with some simple fuzzing, mainly sending
IDAPython is an IDA plugin which allows Python scripts to access IDA's API, IDC, and all the modules already in Python. Most importantly, IDAPython allows us to manipulate IDA's disassembly programmatically without leaving the familiarity of Python. During capture the flags and throughout the process of
