The DMZ

1:22 AM

Happy birthday!

2:17 AM

@J.J It's funny how such a simple program can be so trivially vulnerable.

Arminius

3:35 AM

Ha, I share my birthday with Sec.SE then!

Happy birthday to you both!

Arminius

Cheers

Happy Birthday Security.SE and Arminius!

2

7:32 AM

@Arminius happy birthday!

Anonymous

8:32 AM

@forest Ah, that's the funny thing - this was actually not the devs that introduced this backdoor. It was hackers that seemed to have access to vsftpd for a very short while :p

Anonymous

@Arminius Happy birthday sir :D

heh

Anonymous

Yeah hah, if you check the signature of the version it's an incorrect signature.

Anonymous

It would seem they didn't know what else to do so just pushed a very small backdoor lol.

Anonymous

But, I enjoyed the research on it now it's time to find a proper exploit to research :p

Anonymous

8:35 AM

Basically just doing some vulnerable boxes for a few days until I buy OSCP materials, heh.

here's something fun @J.J wordfence.com/blog/2018/11/…

There was a backdoor attempt for Linux a while ago where the commit added a check for the syscall wait4(), and if it had a certain specific argument, it would boost the process to root. The backdoor attempt was introduced when someone silently changed an if (uid == 0), which checks to see if the UID is zero and evaluates to true if it is, with if (uid = 0), which unconditionally sets the UID variable to 0, or root.

It was caught before it made it into mainline, but still.

sidenote: 27 questions to 50k questions

Noice

also SquareCTF is running until Tuesday I think @J.J

and so far only Gilles and I have been contributing

read: so far only Gilles has been contributing

8:50 AM

lol

oh and Conor was there in the beginning, don't wanna leave that out

What kind of CTF is it?

there are two math-ish challenges and some reverse challenges left

mid-level I'd say

the first challenges were very beginner friendly though

the challenge I am working on revolves around reading glyphs in a font that are in the "wrong" character spot.

Like the wrong code points?

don't wanna give too much away here

I can tell you more in the slack channel

8:55 AM

I don't use slack.

do you have a good alternative? I'd love a change

I always use IRC myself.

Anonymous

Heh, Tom I will see if I can jump on.

Anonymous

But like you said, even if it's me, you and Gilles what we actually mean is just Gilles.

he has been kinda absent the last day or two

and the challenges are definitely doable

Anonymous

9:02 AM

And about the vulnerabilities I need to research, OSCP is quite old as in, the content is pretty outdated.

Anonymous

So I'd need to research older vulnerabilities.

good thing on slack is, that you can paste code into the chat, get code highlighting and have the code in a separate window and stuff like that

Anonymous

Heh, I need to work on my privesc as well.

Anonymous

Seriously, I know nothing about privesc.

but as I said, I don't like slack as a company as well

Anonymous

9:03 AM

I am the if in doubt dirty cow out kinda' privesc guy on Linux lmao.

Anonymous

And as for Windows privesc... No thanks lol

A lot of privesc is just looking for crappy setuid binaries.

Anonymous

@TomK. :O Why not Tom? Do they do dodgy stuff or? :thinking:

privacy-wise they are pretty edgy

and also policy-wise they are more than doubious

Anonymous

Oh, I had no idea.

Anonymous

9:06 AM

Eh, I just use Slack because you guys use it :p

Anonymous

@forest Yeah I guess, but I am really bad at privesc, I for sure need to do a lot more of it before OSCP.

Anonymous

Thank God for LinEnum though let me tell you, lmao.

they have some weird investors and - like a lot of other silicon valley companies - get involved with sketchy people

nytimes.com/2018/10/12/opinion/silicon-valley-saudi-arabia.html

Anonymous

Oh yeah, but I think most companies have that if you avoided them all you'd run out of products...

Anonymous

Well, I guess you can do what Forest does and use IRC.

9:10 AM

@forest I am failing to understand how if (uid = 0) makes any sense? I mean it's not evaluating any condition in if statement

@daya That's the point. It was a backdoor.

@J.J you can always use open source products

Anonymous

@TomK. That's very true.

Anonymous

Oh no, no, no, no, no, no.

Anonymous

One of our customers has asked about Bleeding Bit.

Anonymous

9:12 AM

And a guy on my team has answered his questions.

Anonymous

Completely incorrectly.

Anonymous

..... sigh

@forest Oh you mean somebody has changed if (uid == 0) to if (uid = 0) lmao

Anonymous

Why do people answer things they don't understand? :O

Anonymous

Just ignore it, don't try and explain to someone who doesn't understand, like you understand when you don't.

Anonymous

9:14 AM

People always do this at my work.

Anonymous

Blaggers man..

Anonymous

Gotta' love 'em.

yeah... what's bleeding bit again? (nsfw)

Anonymous

Don't get me wrong, I don't know much about Bleeding Bit either.

Anonymous

However, instead of stringing together some bs sentence about it, I would've researched it a little so I could at least answer all the questions this guy has asked.

Anonymous

9:17 AM

This guy has just strung together some typical "this vulnerability blah blah" it means nothing to the customer that's why he's asking!

@forest would you be interested to join the CTF team if we'd stop using slack? :P

Chatting on phone really sucks I was replying to the forest and It repied to the Tom

And then I had to edit it

Anonymous

Oh well! I will be escaping this mess soon anyways... Now I passed that NA-Sec I got a much higher chance of getting a job in sec. Yay!

Anonymous

@TomK. I couldn't tell if you were joking but - armis.com/bleedingbit/#/general

I dunno, I only really do forensics CTF, and even then very rarely.

9:24 AM

forensics challenges are very rare in these "mainstream" ctfs unfortunately

we don't have anyone in our roster who's too good with crypto challenges though

Anonymous

I think Forest would do quite well on the crypto challenges.

maybe that's something that you'd be interested in

Anonymous

That being said, most of them are Python related.

Anonymous

So if you don't know much Python you might have a hard time.

Anonymous

(Like I do, have a hard time I mean, but for me Crypto ones are the most interesting)

Anonymous

9:33 AM

Christ, it's amazing how many recruiters contact you as soon as you pass an exam, lol.

where do they contact you?

via linkedin?

Anonymous

Correct.

Anonymous

I hate LinkedIn though, I'm really considering getting rid of it.

Anonymous

But yes, LinkedIn.

9:56 AM

Screwing with Linux on a Nintendo DS... Wow it's slow.

Anonymous

lol.

lol already a null ptr deref

Anonymous

That's cool Forest, is there any information on the Internet about that or this is something you're just doing?

Yeah it's an old (like 2009) project some guys did called DSLinux.

I'm just messing with it.

Anonymous

Ah I see.

10:00 AM

And another project called MoonShell which I haven't used in like a decade.

It's amazing how buggy these things can be.

Anonymous

How do you get time to f*ck around with these kinds of things?

> nloader.c:306 ML_FreeEx: #00104: Not found target ptr in MM->pLists. [0x023cac6e]

Anonymous

I guess you work for yourself, right? So that's a massive factor.

> Application halted !!

Yeah

Anonymous

And I presume you don't study for any certifications, etc either?

10:02 AM

nope

Anonymous

Hah. Living the dream Forest!

Ugh, the 2010 version of the MoonShell homebrew is so ugly compared to the 2006 version. The 2006 version actually had movable windows, looked badass, and even had a temperature sensor (I didn't even know NDS had one!).

Anonymous

On top of my 9-5 not including my commute & study the rest of my free time goes on my significant other and the occasional tv show/film on Netflix.

just cancel your netflix subscription

you won't miss it

wow I have porn on this from almost two decades ago

huh

Anonymous

10:06 AM

@TomK. Eh, I pay for it mostly for her than myself.

> Detecting return code. Please wait.

heh

Anonymous

I don't give her any other money because I've not met her yet so I don't mind paying for Netflix. I mean, I was paying for it before but I started using it less & less. Only time I use it now is for Suits but uh, that's in mid-season and I could easily just obtain the episodes "legally"

please... stop ... talking about... porn.

Anonymous

^ done.

But so much nostalgia. This was when I first found out a machine that can fit in my hand was capable of connecting to the internet!

...and crashing on images larger than 400x400

Anonymous

10:10 AM

Never had a DS :p

Anonymous

I had the Gameboy Colour.

I had a GBA and NSA. Played a little with GBC. But aren't you too young for that?

Anonymous

The Gameboy Colour? Yes I am.

wow my fucking browser cache folder

Anonymous

But my dad gave it to me.

10:11 AM

ah

I only started hacking around on NDS. Was never there with the GameShark.

Anonymous

I also had the Gameboy Advance SP in blue.

Anonymous

My grandfather bought it for me.

I had one in dark blue and one in light blue.

Always fought with my brother about who got the light blue one.

Because unlike the dark blue one which was front lit, this one was back lit!

Anonymous

^ bad opsec :p

Anonymous

Jk..

10:13 AM

Or is it disinfo? :^)

But no I had a brother and we did fight over it.

Holy shit images load so slowly on this thing.

Anonymous

"had" that's sad.

Anonymous

:p

Well, have. But he doesn't fight over GBA with me anymore lol.

Anonymous

Hahha, lol.

Anonymous

That makes sense.

Anonymous

10:15 AM

Uh, I hate waiting.

Anonymous

Waiting for things is so painful.

Wooow I totally forgot, every once in a while when I do any operations on the filesystem, it randomly gets corrupt. Wow.

And 30 seconds to copy a 100 KiB file :D

Damn I forgot how slow this thing was. This is a blast from the past.

Anonymous

lol.

Anonymous

I don't get nostalgia often but when I do it's a great feeling.

Anonymous

Like, I played on the PS1 the other day and oh my God.

Anonymous

10:17 AM

It was great.

Anonymous

To be perfectly honest though, I don't miss being a child one bit.

Anonymous

Even though people my whole life told me I will, I don't think I ever will.

Anonymous

I hated not knowing who I was tbh.

59 seconds to set a 256x192 bitmap as my wallpaper :D

Anonymous

Christ.

Anonymous

10:24 AM

That thing is slow, lol.

ikr

I have so many memories of browsing the web on this thing with a browser that had "very primitive inline image support" and simple HTML support.

Anonymous

I'm lucky I never had to deal with something like that.

Anonymous

I take that for granted sometimes.

To be fair, I think it's just the homebrew program that's slow. Or not making good use of the SD card, because I'm pretty sure the CPU itself is faster.

Anonymous

Heh.

Anonymous

10:26 AM

Either way, I still never had to deal with anything that slow ;)

The internet as a whole used to be very slow.

Anonymous

Then again, the Gameboy was probably a lot slower than I thought.

I mean this was back when JS wasn't always mandatory.

Anonymous

Do you know what scares me? Dial-up.

Anonymous

I feel sorry for anyone who had to use dial-up.

10:27 AM

Yeah but GBC ran highly optimized games.

Actually dial-up is not that bad. It comes in many speeds, some of which approach DSL.

Anonymous

Well, let's just say early dial-up.

Back when you'd memorize a phone number instead of an IP. :P

Anonymous

I cannot even imagine having a connection slower than... 100mbps.

Anonymous

Well, I did at one point have a very slow connection but I never used the Internet at that point.

I have like 10 mbps and I'm fine with it.

Anonymous

10:28 AM

So it didn't impact my life.

Anonymous

10? Damn, that's slow.

Anonymous

Wait, you don't have an ISP, do you?

I don't want to give @TomK. a migraine but... back then porn had a phone number on images so you could dial back up to the site, instead of a URL.

How could I not have an ISP? No matter what I use, I'm using an ISP.

Anonymous

I meant, you don't have a line coming into your home.

Anonymous

Of course you're using an ISP you cannot route everything yourself.

Anonymous

10:30 AM

But, you don't have a line into your house, right?

Oh

Right

Anonymous

I cannot even imagine what that is like, lol.

It's not bad. I mean I also use Tor so it's not like I'd be missing much.

Anonymous

It's official.

Anonymous

We've taken this "I can be what I want too far"

Anonymous

10:39 AM

"I am 69 but I want to change my age to 49"

Anonymous

Please.............................................

wat

Anonymous

It is on the news.

Anonymous

Well, BBC News has a morning show called "VictoriaLive"

Anonymous

They cover news topics, get people in to talk about news and problems within the UK, etc.

Anonymous

10:41 AM

This woman has come on, she is 69 years old and she wants to change her age to 49 years old.

Anonymous

This idea that "I am what I say I am" has gone too far, way too far.

O_o

I identify as an apache attack helicopter.

Anonymous

Whether you agree that it's gone too far or not, you cannot seriously tell me that this woman should be able to change her age.

Anonymous

Think of some of the legal concerns that changing your age could cause.

I mean she can tell anyone whatever the fuck she wants to.

But changing your age?

Anonymous

10:42 AM

Seriously, it could cause a s*it storm.

Anonymous

I'm sorry but changing your age that's too far.

Anonymous

That is taking this idea that you can be what you say you are way too far.

Anonymous

I don't have any problems with the LGBTQ (or whatever other letters there are now) movement.

You can claim to be whatever you want. That doesn't make it so.

Anonymous

Precisely.

10:43 AM

LGBTQIAPP4+

Anonymous

I don't care what you say you are, cool - good for you.

Anonymous

But if I think it's ridiculous I won't conform to it.A

Anonymous

And I refuse to conform to you changing your age.

Anonymous

Like, if you want to be a girl and you're a boy go for it! I don't care.

Anonymous

But if you want to be a Moose and you're a boy, then I won't call you a Moose.

Anonymous

10:45 AM

That's just taking something to an extreme that I refuse to follow.

Anonymous

I don't care if you want to be the opposite sex, or whatever. But if you take it too far then I won't conform to it.

Is it just me or is 250 KB/s for a microSD card pretty slow?

Because even my computer is being that slow.

Anonymous

And changing your age is too far.

Chronological age is just like, a social construct, man.

Like gender or body shape or eye color.

Anonymous

lmao.

Anonymous

10:46 AM

But if you think about the legal issues that changing your age could cause, it's way too many.

Anonymous

And this is why lawmakers won't conform to such a ridiculous idea.

Anonymous

Think about it, if I am 16 and I want to get married, in this country I cannot do it without legal permission until I am 18. Say my parents won't let me get married at 16, well now I can change my age to 18 and I can get married.

Anonymous

Even worse, imagine my partner is only 15 years old and now she changes her age to 18 as well.

Anonymous

Well now I can get married to a minor.

Anonymous

I'm sorry, it's ridiculous don't @ me.

10:48 AM

Imma change my age to 6. See what happens then.

I wonder if the universe will let me live longer.

tbf 16 and 15 is not a big age difference

Unless one of them changes their age to 69

Cuz age is a construct now amirite

Anonymous

Yeah but you see my point, with that madness you could marry a minor.

Anonymous

Take the same principle with a 15 year old and a 35 year old.

Anonymous

See if people have a problem then... (They will! Or at least, anyone with a brain would)

Meh, I mean I'm the kind of person who doesn't care about what two people want to do as long as they're both cool with it. And if it's illegal, that just makes it better.

Anonymous

I guess.

Anonymous

10:52 AM

But I just fear it could cause some serious cases of things that shouldn't happen.

Anonymous

Lawmakers will never conform this madness that's for sure.

Nah, it's not gonna end up doing anything.

If it does, I'll sit back here laughing my ass off at a dumbass society.

Anonymous

See, I guess I would say that I don't care what people do.

Anonymous

As long as it doesn't impact my life.

Anonymous

When it impacts my life I have a problem with it.

10:53 AM

You just don't like people being hypocrites?

Anonymous

There are some things though that people do that I am completely against.

Anonymous

(Obviously)

Anonymous

But mostly, I don't care as long as it doesn't impact me negatively.

I don't think I'm against anything as long as no one's freedom is violated and it doesn't involve giving a government more power.

Anonymous

For example, if you want to snort coke go for it, but if your coke habits hurt me then we have a problem.

Anonymous

10:55 AM

But, we are taking this whole movement a little too far.

Agreed

Anonymous

Canada now has laws that state if someone says they are something and you work in customer service you have to refer to them by their chosen pronouns.

Anonymous

I don't like that.

Yeah that's bullshit. I mean it's polite, but a gov't shouldn't mandate politeness.

Anonymous

If you call yourself something why should I do the same simply because you tell me I should?

Anonymous

10:56 AM

That should be my choice!

Anonymous

You made the choice to call yourself that.

Anonymous

I should be allowed the choice to disagree.

If I wanna call every customer a slave dog I should be allowed to. Likewise they should be allowed to call me a fucktard and leave.

Anonymous

Precisely, it may be bad for business.

Anonymous

But if they have a choice to say they are one thing I should have the choice to say they are not.

Anonymous

10:56 AM

:p

Anonymous

I hate political correctness more than anything.

Anonymous

It's such bs.

Agreed. It's limiting people's freedom of expression.

Anonymous

People only like freedom when it suits them, that's the problem.

Anonymous

And I am probably guilty of that myself.

Anonymous

10:59 AM

(a few times at least)