0xBADCAB1E

…a messy blog about Kabel's life

No updates from 0xbadcab1e?

10. August 2010 | Kategorie CCC-Luxembourg, FluxFingers, Ruhr-Universität Bochum

Well I heard he is stuck between the preparation of his exams, pdf exploits analysis, other interesting statistics to run on information samples (looks very promising atm) as well as the hack.lu CTF orga and the eternal disclosure policy problem.

So don’t worry he’ll be back, sooner or later, with interesting stuff

0 Kommentare »

Hack.lu CTF

8. June 2010 | Kategorie FluxFingers, Ruhr-Universität Bochum

As one can read on the hack.lu page the ctf of the hack.lu 2010 edition will be organized by the FluxFingers:

This year’s CTF contest will be held by FluxFingers, the CTF Team of Ruhr-Universität Bochum (Germany).
FluxFingers have been participating in CTFs since 2007 and are excited to organize their first CTF at hack.lu. The CTF will be challenge-based, similair to e.g. DEFCON Quals, Codegate etc.
Topics include (among others): web security, cryptography, reverse engineering and forensic.
If you have any questions, don’t hesitate contacting us at our booth. We might even give you some hints for free beer.

I’m looking forward to this event, as I’m a FluxFinger team-member and currently already designing a challenge for it. For me it’s the first time I help to organize a CTF, the learning effect of such a challenge design is really huge :)

1 Kommentar »

UCSB – iCTF

Soon, one of my little dreams will be fulfilled. Since I’ve known of its existence, I wanted to be a part of it, at least once!

Friday, 17:00 this event will start. I’m speaking of “The UCSB iCTF“. The iCTF is one of the oldest, most played CTF in the world. It has made its apparition on several media, especially in Germany as German universities win this challenge regularly (ENOFLAG from Berlin won last year). There I first heard of CTF competitions. I was immediately fascinated by these people understanding the machine and what it’s running in such a way that they were able to control it in a way that was not foreseen, and own other experts.

So Friday I’ll be part of the Fluxfingers team, and hope to have a good time and collect some flags. Fluxfingers got a huge amount of new members in the last weeks, so that our team will be more powerful (hopefully) that at the ruCTFe.

Anyhow I’m really looking forward to this event. Tomorrow, is a last training where I guess we will discuss the strategy and who is responsible for what and has to setup what on the vulnerable box, in order to permit more eased hacking, patching and protecting in general.

Somehow I’m also looking forward to the guys of Squareroots and the other teams. I guess this one of the parties the geeks have… other people go to discos and to the bermuda3eck… we go to university and try to understand code, while eating pizza and consuming caffeine.
In the close future I see a Syn2Cat/C3L capture-the-flag contest. Really, I think that will be a great event, too.

Best regards,
Kabel

1 Kommentar »

FluxFingers – ruCTFe09

8. November 2009 | Kategorie Bochum, FluxFingers

Yesterday/Today, I participated in my first academic CTF competition. The Ruhr-Uni-Bochum, has a Capture The Flag team named:”FluxFingers”. I went to their training last Wednesday and it seemed to be exactly what I was looking for, a huge amount of fun and really fit hackers.

So, a friend who also started the master in ITS at the RUB, and I went to the our first challenge, the ruCTFe. This is an extended version of the ruCTF, it open to all universities of the world, so there were really participants from everywhere, the communication wasn’t always easy as some persons were thinking Russian was the language to use (in IRC for example, or some challenges were Russian -.-)

So after one hour of delay the CTF started, looking forward, at that moment, for 10 hours of fun, exploiting, patching, documenting and all the stuff you have to do in a CTF. What happened was a totally different story… Once the image was decrypted we noticed immediately that this would not be a usual ctf. Everything was related to android, you had an emulator on which the vulnerable services had to run. The setup of the emulator, understanding how everything was intended to be, and making things run took us quite a while. Same for other teams, so that after 4 hours nobody had any flags nor service running… not really what you think a ctf is. A reboot if the vulnerable image finally made things better, nobody understood why, but that was our smallest problem, it was up an running, and we were getting defense points. We managed to be first a long time, but didn’t made it till the end.

The vulnerable sources were really hard to understand, we found some bugs, we exploited some, but it didn’t bring us much, as our best exploit was running on a service that no other team managed to start… We got some points for advisories and for defense, I think we got only one valid flag. Which was not much different for the other teams.

Squareroots managed to exploit one service and collect a huge amount of flags. We think they exploited the same vulnerability as we did, except that they had less problems to setup their android image.

I found some piece of exploits, and helped some people having problems to understand different parts of the service F (written in Python) and wrote some exploits. All in all, it was really fun. Looking forward to the next CTF, the UCSB on 4th December. FluxFingers members told me that there would be more to exploit and it would be less “who is best at setting up his linux android”

To finalize, we finished at place 12 of 43 teams. All German universities did great like usual, squareroots (Mannheim) won, 0ldEurope (Aachen) was a great target to test my exploits :P , but they had a good rank at the end too. FluxFingers member were little bit disappointed by the challenge I think, they were looking forward to steal flags, not to configure android emulators.

2 Kommentare »