[CTF] GreHack 2024 - Babycaller challenge

Julian Francisco 9 Décembre 2024 Ctf

Here is a writeup of a challenge I have written for Grehack 2024. Challenge task Yet another baby challenge… Provided files babycaller.tar.gz: bzImage : Kernel image run.sh : Bash script to run the VM entrypoint.sh : Bash script run in the docker to give an instance to a VM config : Kernel config babycaller.c : Kernel module source code initramfs.cpio.gz : Initramfs TL ; DR Leak KASLR using a format string Find a wrapper to list_del function Overwrite modprobe_path using list_del Get our flag :) 📖 Overview ♻️ Source code analysis The source code is short and straightforward:

[CTF] ECW CTF 2024 - Windows challenge write-up

RandoriSec 14 Novembre 2024 Ctf

Every year, during European Cyber Week (ECW), a preselection phase is organized to qualify for the ECW Capture the Flag (CTF) finals held in Rennes on November 20th this year. Players compete in challenges in the crypto, reverse, pwn, forensics, web and misc categories. Last year, Express, one of our security researcher, was the only one to have successfully solved all the pwn challenges. He explained the solutions in this blogpost.

[CTF] Sthack 2024 - WU

Barney, Quentin, Brendan, Arthur, RandoriSec 4 Juin 2024 Writeup

Cette année la conférence Sthack a une saveur toute particulière pour nous. Depuis plusieurs années nous participons avec plaisir à cette conférence qui est devenu un évènement incontournable et un lieu d’échanges et de rencontres précieuses. Une partie de la réputation de la Sthack est à chercher du côté de son CTF nocturne qui a eu lieu à la Mairie de Bordeaux et si cette année est particulière pour nous c’est parce que notre équipe en a remporté la première place.

[CTF] ECW CTF 2023 - Pwn challenges write-ups

RandoriSec 8 Novembre 2023 Ctf

Every year, during European Cyber Week (ECW), a two-week preselection phase is organized to qualify for the ECW Capture the Flag (CTF) finals held in Rennes on November 22 this year. Players compete in challenges from various categories such as: crypto, reverse, pwn, forensics, web and misc. There were five challenges in the pwn category, four of which were developed by the Thalium team. The challenges covered a wide range of topics, including exploiting a game on a Gameboy or taking advantage of a faulty shadow stack implementation.

[CTF] ECW CTF 2022 - Reverse challenges writeup

RandoriSec 18 Novembre 2022 Ctf

During the European Cyber Week (ECW), a Capture the Flag (CTF) was organised on November 16th at Rennes in France. A preselection took place from October 14, 2022 to October 30, 2022. Our security researcher Express got to the final round and wrote some write-ups for the reverse-engineering category. The challenges were created by the Thalium team and were interesting to solve. On the agenda: a Windows challenge involving a minifilter driver an UEFI challenge with some EFI bytecode reversing an OpenGL based challenge Without any further ado, here are the write-ups.

Catégories

Tags