r00timentary got 4th place in DEF CON CTF 2021 Finals as team StarBugs (with CodeRed, GYG, SED, and a few more friends). Congratulations to the winners, and we thank @oooverflow for organizing the great CTF!
DEF CON 比赛
DEFCON 仍然是非常重视逆向、底层基础的比赛，和国内的风格不太一样。
网友对于 DEFCON 29 CTF 的总结。
oooverflow 四年主办方，结束了，带着一丝伤感。Zardus 也是感慨良多。
1 2
Players, it was an honor to play with you in these four years. We hope our successors will be as lucky.
Time/place. DEF CON will be held August 8-11, 2018 in Las Vegas, Nevada, USA. Our game will run August 9-11. More details can be found at https://defcon.org. Due to reasons, we currently do not know which exact hotel the CTF will be hosted in. We will let you know as soon as possible.
主办方说由于某些原因，他们也不知道场地在哪里。。可那时候离比赛开始没多久了。。后来去了现场才知道好像是 DEF CON 忘了给 DEF CON CTF 划分场地了，这就有些尴尬了。
8 月 2 号的时候主办方，突然通知说要我们准备材料
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
Hello teams!
We hope you are excited, because DEF CON is one week away! Here is some information to help you finalize your infrastructure setup. Organizational info (badge pickup, etc.) will be sent out shortly.
- The game will start at 10am on Friday morning. Eight people per team can get in to set up starting from 9am.
- If all goes well, you will have four tables, arranged in a square, with eight chairs inside them. You may not have more than eight people at the table. This is a hard limit, and if you violate it, we will disqualify you. Where the rest of your team hacks from is up to you.
- We will provide the compute to host services.
- We will run one power cable and one ethernet cable for each team. You will access the game over the ethernet cable using good old-fashioned ipv4. We plan to provide internet access over this same link, however, this depends somewhat on the hotel's cooperation, so please be prepared for the contingency where we don't have internet, have filtered internet, or the world suddenly switches to FreeBSD and ipv6.
- Please come equipped to display video over HDMI (i.e., bring a monitor with HDMI input and an HDMI cable).
See you in Vegas! - OOO
其中，似乎第四条他们去年也说了。。然而不知道他们会咋搞。
还有很奇怪的是让我们准备一个显示器，然后本来我们就有打算要给 NUC 配个显示器，所以趁机也就买了。当时猜测是要联机打游戏，当然是瞎猜的。最后比赛的时候主办方竟然真的准备了 20 台老旧的 x box 游戏机，还有手柄，让大家联机打古老的游戏。
In the future, there are no vulnerabilities in _/any/_ platform, not **just** GNU/Linux. In order to prepare yourself for a view of the future of bug-free computing, there are a few tools you'll need to bring from the past. It is _/highly/_ suggested to take all of the following with you.
Microsoft Windows + Visual Studio
- If you don’t have a proper install, https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/ can probably work in a pinch - https://visualstudio.microsoft.com/vs/community/
MacOS + XCode + iOS SDK
- If you don't have a physical Mac in your hands, don’t fret. https://github.com/foxlet may have a solution for you - https://developer.apple.com/news/releases/
Any GNU/Linux distribution with proper toolchain + Android SDK
FreeBSD (comes with toolchain) - https://www.freebsd.org/
While we can't tell you exactly what the future will bring, and you may not need everything listed on your journey, it's better to come prepared, and you may need more of these tools than you think!
each team is provided with an image running telooogram. each team's username is "teamXX" (eg team04), where XX is your team id (base 10) the voice protocol is exposed via telooogram.oooverflow.io on port 44XX, where XX is the team id patches go through an "app-review process" and may have high latencies at times submissions go through the normal interface. iPhone:~ root# sw_vers ProductName: iPhone OS ProductVersion: 12.4 BuildVersion: 16G77 iPhone:~ root# uname -a Darwin iPhone 18.7.0 Darwin Kernel Version 18.7.0: Fri Jun 21 22:24:15 PDT 2019; root:xnu-4903.270.47~7/RELEASE_ARM64_T8010 iPhone9,1 arm64 D10AP Darwin just fyi it's running the armv8 slice your two test team accounts were emailed to you in the 8th, if you don't have them, come find us....
Test team accounts for telooogram CLOSED Sat @ 1:46 AM Tea Deliverers- It is said that > your two test team accounts were emailed to you in the 8th, if you don't have them, come find us.... But we didn't receive the email.
=============================================================================== Definition: A snippet of assembly code is N-Flip Resistant if its output remains constant (i.e., it produces the same output and exits with the same return value) even if ANY combination of N bits are flipped. One-flip Conjecture: The x86 architecture is such that it is possible to write any arbitrary program (of any length) in a way that is 1-flip resistant. - Balzaroth (Vegas 2019) =============================================================================== It is now your turn to provide a proof for this Conjecture, which has puzzled hackers and security researchers for hundreds of years. Provide a shellcode (max 200 bytes) that prints ‘I am Invincible!’ and then terminates with exit code zero. Points are assigned based on how close you are from a complete proof (i.e., based on how many bit flip your code was able to withstand) ------------------------------------------------------------------------------- But first, how do you want the registers initialized before executing the code? 1. I like all my registers set to zero 2. I want them pointing to the middle of a 64KB R/W region of memory) 3. Dont bother. Leave them as they are
Welcome to Hexo! This is your very first post. Check documentation for more info. If you get any problems when using Hexo, you can find the answer in troubleshooting or you can ask me on GitHub.
