The first part of the challenge is to find the initals of the club Alex was in university. Googling "Alexander Taylor Raytheon" brings up his LinkedIn, which shows that he went to the University of South Florida and was president of the Whitehatters Computer Security Club. Using the
Capture The Flags (CTFs) are how the those of us in the computer security industry test both ourselves and each other. This year for CSAW CTF I completely rewrote the website behind the CTF to make it easier for myself and future organizers to administrate. CTFd, as I've
A few weeks ago the CSAW CTF was run from NYU-Poly and over 2500 teams registered to play. We’re releasing most of the CSAW CTF challenges in a VM for those who were not competing to download and try on their own. CSAW Quals 2014 VM - MD5: abc2fd91edc1b4f60a88a4183ce4fbe6
These past few weeks, we participated in Build it Break it Fix it. Our team consisted of Ancat, Blankwall, ColdHeat and Kiwi. Contestants were tasked with writing correct, secure and fast code in the Build it round. Next, the Break it round has them looking for bugs and vulnerabilities in
Analysis This challenge presents us a with 32 bit, ELF executable with debugging information. We connect and see some allocation and freeing happening and can take a reasonable guess as to the fact that there may be a heap overflow. This guess is confirmed with some simple fuzzing, mainly sending
IDAPython is an IDA plugin which allows Python scripts to access IDA's API, IDC, and all the modules already in Python. Most importantly, IDAPython allows us to manipulate IDA's disassembly programmatically without leaving the familiarity of Python. During capture the flags and throughout the process of
Dearest Islamic brotherhood, it is with great pleasure that we reveal our true identity as the Cyber Research Institute for the Islamic State of Iraq and Sham (CRIISIS). CRIISIS’ holy cyber mission is to cyber research cyber technology to wage cyber jihad on American infidel #CISSPs. CRIISIS’ greatest cyber research
Brooklynt Overflow recently participated in Olympic CTF finishing in 29th place. This is a write up of the aski challenge. The aski program is a large stripped statically compiled 32 bit elf binary that opens a window and plays a video of a skier performing a trial as a series
For 400 points, Olympic CTF provided the Make Similar challenge. The description was "Listen carefully and try to figure out. Hint: 120 LPM." The link pointed to a stream for an ogg file which played unintelligible beeps and static. The stream has been backed up with the challenge
Brooklynt Overflow Recently Competed in HackIM CTF. This is a writeup of the vuln4 service. The author was kind enough to provide source to this challenge which is nice but ultimately not necessary or terribly helpful. #include #include #include #include #include <sys/types.h> #include <sys/stat.
Brooklynt Overflow Recently Competed in HackIM CTF. This is a writeup of the vuln3 service. Vuln3 is a service exposed to the Internet via xinetd or something similar. It accepts input from you writes it to the stack, parses it and performs actions based on it. It does this until
Exploitation 200 HackIM Triage This challenge gave us a binary called srv2. Running file on the binary we are shown CheckSec revealed there was no NX but we assumed ASLR was enabled on the challenge server. From there we started the binary up and connect to it on localhost port
