Thanks to David, Kai, and Kevin for help with various phases of this challenge. This is a writeup on solving a particular CTF challenge, as well as a meta-writeup on practical applications of using Burp Suite to beat HTML forms into submission when manual entry is becoming tiresome. We start
Introduction: This kind of attack exists because of the cryptographic padding that takes place on the message length. Since, Plaintext can be of varying length, however block ciphers require that all messages need to be exact number of blocks. To satisfy this requirement we use padding, to get the exact
This blog post describes about the lesser known attack, targeted towards HTTP Headers due to improper input validation. It also describes on how other attacks can be mounted using this mechanism. Introduction: All the websites rely upon HTTP to transmit data between client(browser) and server. Client sends a request
Newsletter
Please check the first part of this series on Android 101, if you want to check the necessary tools and how to prepare for the app assessment. Lesson6Activity (Encryption vs Encraption) As the title suggests, this lesson is about encryption. Specifically, it concentrates difficulties with key management and why relying
Please check the first part of this series on Android 101, if you want to check the necessary tools and how to prepare for the app assessment. Lesson4Activity (SSL man in the middle): The instructions for this lesson suggest that we need to intercept the token that is sent as
This app was released in this year's Shmoocon'13 by Intrepidus Group. You can get the app from the Google play store. This app as the name suggests is an android security learner app, there are deliberate vulnerabilities in this app from bad logging to intent manipulation.
Challenge Overview The challenge was presented as a game to be played over the internet. Players could access the game and play a command line version of minesweeper by connecting to a port on the game server. The ultimate object however was the retrieval of a flag placed in the
Note: This is all written for Python 2.7.3. These details might be different in other versions of Python - especially 3+! Attempting to escape a sandbox is always a fun challenge. Python sandboxes are no exception. In a static language, this is usually done by analyzing the code
This time around, I'd written a challenge for CSAW CTF. There were 32 challenges, in all sorts of topics such as Web, Reversing, Exploitation, etc. The challenge I wrote was the 300 point Web challenge, HorseForce. Walkthrough From the start, you're given an account to this
So word spread pretty quickly about the wireshark bugs being thrown around Defcon 20 CTF. After I got my hands on acme pharms packet capture I quickly set out to recover the evil packets and weaponize them :) After unpacking the tarball I found a pcap file that crashed my Wireshark(
As a University research lab, we often have students who are not familiar with concepts that the professional security community finds second nature. Something that I have to explain to new students very often is the concept of Endianness. A concept that reverse engineers and low-level programmers deal with on
On Febuary 22nd, the Stripe company ran a straightforward 6 level CTF. The first level provides a single setuid binary and corresponding source and the task of obtaining the flag (a password to another user's account) from a text file (/home/level02/.password) owned and only viewable by
