Wow, we completely failed at HITCON CTF. Hard stuff

I spent most of the time on two web challenges of which in the end one got solved by just three teams and the other by just one (Dragon Sector, obviously)

@jdgregson Eh, there are worse companies out there. The good thing is that disabling scripts tends to kill most ads, even without adblock.

And I disable scripts for most sites and disable video/audio autoplay.

Happy bday @J.J

cool

@Arminius maybe we have to recruit some people from crypto.se and reverseengineering.se

@TomK. i think the CTF was inherently just too difficult. I'm not even sure how the oneliner php challenge can be solved

^ the web challenges were also tough

I didn't really look at the challenges

didn't have too much time this weekend

just had a glance at the EV3 ones

yeah I get that

I figured I have to get back to the basics

learn more about OSes and programming

and (I think) specializing is key

Very true, agreed

uh, one of the hex-rays devs is a mod at reverseengineering.se

@TomK. yes, he's very helpful in chat too

ah

well, I just advertised the team in their channel, maybe someone's interested

@HamZa To be fair, the challenges we attempted were on the harder side. Also, reading some of the write-ups we weren't actually that far off, e.g. github.com/orangetw/…

@Arminius are you able to DL "exp_for_php.py" ???

@HamZa No, Github's having issues

Actually, same for the other web challenge. I saw the machineKey in web.config but had no clue that/how one could exploit _VIEWSTATE with that. Since the the author rated it 4/4 that's probably okay

ok, because i still have no clue what step 1 & 2 refer to

@HamZa Since you can't do cross-origin include() you need to plant the payload somewhere locally. I tried that with /proc/self/environ because I hoped some of the request headers would end up there. Didn't work though

The author suggests using PHP_SESSION_UPLOAD_PROGRESS because when you upload a file, it's storing some metadata about the upload progress somewhere in in /tmp/[your PHP session] (the idea is that a user uploading large files could track the progress with independent AJAX requests, AFAIU).

@RoryAlsop Mind unfeaturing the HITCON CTF announcement? :)

@SYS_V Don't you or some of the other RE folks want to join forces with us already? :-) @TomK.

@Arminius done

I can't speak for the others, but I am definitely interested. Unfortunately it will be a while until I am able to. Lack of time is one issue, but so is a lack of skills and experience on my part. I need these in sufficient quantity before I can participate. Good luck

@SYS_V don't mind the skill part. you are probably more skilled than most of us wrt to RE

and experience is only gained through experiencing ;)

Agree with @TomK. Even if that's the case it shouldn't stop you from participating if you're interested

^ this

people agree! \o/

Haha to be honest I agree with this too, but I time is the main problem. Case in point, I have an exam today and midterms coming up later. I should have more after the end of this semester

I hear these are the most important midterms ever

so you better be prepared

@SYS_V concerning the CTF team: 1) you are always welcome 2) if you see someone on RE.se that seems interested in doing some challenges it would be cool if you pointed them towards our direction. There's also a meta post here

Much appreciated. Will do

many thanks

What happens if I delete a featured post 🤔

@Arminius well... the simple effect is that it vanishes both from it's normal spot, and from the featured sidebar

@RoryAlsop Heh, I was thinking I could maybe unfeature a post myself by deleting and undeleting it. It's a bit awkward to always bother the mods with that :-)

@Arminius Ach - it only takes 20 seconds to remove the featured tag. The speed of me doing it does depend on when I see your ping though :-)

sup. Idk how much time I actually have but I was just thinking about getting involved in CTFs a couple of days go. Most of my SO XP comes from RE.SE but I do have exploitation (and some forensic) experience. Getting into a CTF team slack will definitely improve chances of me actually playing

@NirIzr Awesome!

We definitely need some RE folks, got an e-mail address to send the invite to?

@NirIzr Got it, you can delete

thx

@NirIzr Sent

@Arminius got it, thx.