CSAW CTF 2013 - Reversing200 (CSAW Reversing 2013 2)

CSAW Reversing 2013 2 - 200 Points

csaw2013reversing2.exe

Yet another win32 executable. Let's run it, annnnd it's crashed :/
Load it in olly, you should see:

A decryption loop!

Right after the decryption loop where the flag will be shown in a message box, the flag text is actually stored in ESI, so let's dump the value of ESI while we are in the decryption loop:

Flag: number2isalittlebitharder:p

CSAW CTF 2013 - Reversing100 (CSAW Reversing 2013 1)

CSAW Reversing 2013 1 - 100 Points

csaw2013reversing1.exe

We were given a win32 executable in this challenge, let's run it:

Oops... Let's load it in a debugger

So, there is this call to IsDebuggerPresent that causes the display of junk instead of the flag.

Flag: this1isprettyeasy:)

CSAW CTF 2013 - Reversing100 (DotNet)

DotNet - 100 Points

DotNetReversing.exe

DotNet is a .Net executables. Let's decompile the executable:

To solve this challenge, one must get the correct value of num in order to get the value of num3=6553563335L. XOR, as we know it, is reversible, so:

num ^ num2 = num3

We can get the value of num by performing:

num = num3 ^ num2

num = 13371337255

Now we run the executable with 13371337255 as the argument:

Flag: I'll create a GUI interface using visual basic...see if I can track an IP address.

Wargames.my July 2011

 Well, I was supposed to have this posted in July, but I was slacking most of the time.

From the official website: "WarGames.MY is Malaysia’s first ever online CTF, by Malaysians, for Malaysians. It’s basically a 24 hours hack game featuring 18 challenges scattered across 6 categories. We do know that there are CTFs and other security games in Malaysia but they all require the team/person to be physically there. So figured what the heck, let’s do an online CTF."

So yeah, it was (and still is) Malaysia's first online CTF. Even cooler, this CTF was supported by Hack In The Box and HackerspaceKL. Prizes for the winner were RM2000 cash prize + Seeduino starter kit + HITB training and conference passes.

There were several categories of challenges in wargames.my, ranging from the usual binary reversing, vulnerability hunting, cryptography, web challenges, forensic, to network challenges.

Also, wargames.my was the first collaboration ever between HITB.MY CTF crews 2.0 and crew 3.0. Anyway, here is the result (been long overdue!):

Place	Player	Score
1st	kuehtiow	1350
2nd	p03p0wn	1300
3rd	pukkimacs	1200

Nomz for the crews.

Graph and scoreboard.

Reversing, exploits, malware analysis and other stuff

A mix of everything

Sticky:
InfoSec  conferences calendar: http://www.google.com/calendar/embed?src=pe2ikdbe6b841od6e26ato0asc%40group.calendar.google.com

Crackmes
http://www.woodmann.com/RCE-CD-SITES/Quantico/crackme%27.htm
http://f0dder.reteam.org/crackmes.htm
http://www.reversing.be/index.php?topic=crackmes
https://malwarereversing.wordpress.com/2011/05/13/crackmes-de-mirror/
http://my.opera.com/taviso/blog/show.dml/241047
http://forum.cheatengine.org/viewforum.php?f=39
http://lkubaski.free.fr/reverse/reverse.html
CrackMe Practices: http://www.reteam.org/ID-RIP/crackmes.htm

Defcon mystery challenge
http://1o57.wikispaces.com/

Emulator
http://www.dosbox.com/download.php?main=1