Last week I was invited by the Defcon Toronto. Team to play at Codefest 2017 CTF. There were some pretty good challenges, but unfortunately the CTF was plagued with frustrating issues like an unresponsive website, and no easy way to communicate with admins. Solving 67k binaries with r2pipe.

Two weeks ago, we were engaged by CTS Labs. As independent consultants at our standard consulting rates to review and confirm the technical accuracy of their preliminary findings. We participated neither in their research nor in their subsequent disclosure process. Our recommendation to CTS was to disclose the vulnerabilities through a CERT.

Malware, encryption, reverse engineering, networking, and other arcana. Monday, March 19, 2018. Recently published results on the LAVA-M synthetic bug dataset are exciting. However, I show that much simpler techniques can also do startlingly well on this dataset; we need to be cautious in our evaluations and not rely too much on getting a high score on a single benchmark. The LAVA synthetic bug corpora. This is a great result, and the authors pulled it by combi.

Remote Exploitation of an Unaltered Passenger Vehicle. The Internet and the Things. PortDog - Simple Python Script to Detect Port Scanning Techniques. Vm ware fuzzing - defcon russia 20. BGP Hijacking why you need to care! The Sleepy Puppy XSS Payload Management Framework. Java and Flash both vulnerable again to new 0-day attacks. PFP - A Python Interpreter for 010 Templates.

Program analysis, verification and security. Tracking Down Heap Overflows with rr. 8217; Taint tracking solution.

Python Arsenal for Reverse Engineering. Abstract Binary Format Manipulation - ELF, PE and Mach-O format. A generic framework for decoding instructions, developed to reduce the time needed to implement support for new architectures. A symbolic algebra module which allows to describe the semantics of every instructions and compute a functional representation of instruction blocks. 25, 26, 2.

SANS HolidayHack 2016 Full Writeup. Another year has past, which means the SANS HolidayHack. This year, many new technologies were used, which were a blast to dig into. This writeup dives into each challenge and the methodology used to solve it. A summary of the story this year is below. Whitehat - pwn3 - readfile.

You gotta be handy with the machine, if you know what I mean. Using a Texinfo edition of SICP. A Review of ZSH Completion. What if the foundations of mathematics are inconsistant? .