(my) CTF archive

Sticky:
http://pentest.cryptocity.net/capture-the-flag/
http://capture.thefl.ag/calendar/
http://www.pimenidis.org/research/papers/hosting-a-hacking-challenge-22c3.pdf
http://ctfcentral.org/defcon/CTFList.html

write ups:
http://www.defcon.org/html/links/dc-ctf.html
http://www.vnsecurity.net/2010/05/defcon-18-quals-writeups-collection/
http://barok.foi.hr/~tkisason/
http://nopsr.us/
http://shallweplayaga.me/
http://rogunix.com/defconquals19.html
http://daxnitro.com/quals/index.html
Hack.lu CTF http://esec-lab.sogeti.com/post/Hack.lu-CTF-2011-Write-up-:-FluxScience
CSAW 2011 Python Reversing 200 http://esec-lab.sogeti.com/post/Hack.lu-CTF-2011-Write-up-:-FluxScience
http://localh0t.blogspot.com/2011/09/ekoparty-2011-ctf-httpd-daemon-buffer.html

Forensic stuff

Cheat sheets
http://acme-labs.org.uk/galleries/47/0000/2345/forensic_cheatsheet.pdf

Digital Forensic War Game
http://real-forensic.com

Forensics workstation
http://computer-forensics.sans.org/community/downloads

HD Forensics
http://osforensics.com/tools/create-disk-images.html

Memory analysis
https://www.volatilesystems.com/default/volatility
http://mnin.blogspot.com/2011/06/examining-stuxnets-footprint-in-memory.html

Packet analysis
http://security.crudtastic.com/

sources:
http://windowsir.blogspot.com/
https://www.volatilesystems.com/default/volatility
http://centralops.net/co/
http://all.net/

timeline creation from images
http://computer-forensics.sans.org/blog/2009/02/24/digital-forensic-sifting-registry-and-filesystem-timeline-creation/
https://5thsentinel.wordpress.com/2009/06/07/sans-sift-using-regtime-pl/
http://www.sleuthkit.org/sleuthkit/man/mactime.html

Windows analysis
https://bitbucket.org/Elie/owade/wiki/Home

15 incredibly useful (and free) Microsoft tools for IT pros

Source: https://www.networkworld.com/slideshows/2011/071911-microsoft-tools.html

Summary of the tools: (also from the link above)

1. WSCC – Windows System Control Center - Windows System Control Center is a one-stop downloader for almost 300 maintenance tools from Microsoft's Sysinternals and the ever-popular NirSoft suites.
2. RichCopy 4.0 - This little Microsoft TechNet invention spares you the headache of learning, checking and retyping command lines.
3. Microsoft Attack Surface Scanner - Microsoft's Attack Surface Scanner is a sort of checklist that helps you analyze security issues and plug possible vulnerabilities fast.
4. Microsoft Standalone System Sweeper Tool - In case of a (deep) infection of boot files by viruses or rootkits, there's not much a real-time scanner can do. In that case, MSSSST (yes, that's Microsoft's naming convention at its best) creates a bootable CD, DVD or USB key that hosts an offline copy of Microsoft Security Essentials -– including all the latest signatures downloaded from MS servers beforehand.
5. NoReplyAll add-in for Outlook 2007 and 2010 - "NoReplyAll" (a Microsoft Research Project) prevents e-mail recipients from forwarding or using "Reply All" to spread your e-mail to other co-workers.

Permutation Oriented Programming

Stumbled upon this post a few month ago


<++BOF>


-=[ Introduction
Many works have been done regarding evasion techniques against Intrusion Detection System (IDS) and Intrusion Prevention System (IPS), but most of them are related to:

 - Packet fragmentation [1]
 - Stream segmentation [1]

 - Byte and traffic insertion [1]
 - Polymorphic shellcode [2]

 - Denial-of-Service [1]
 - URL obfuscation (+ SSL encryption) [3]

 - RPC fragmentation [4]
 - HTML obfuscation [5] and JavaScript obfuscation [6]

 - Etc...

Defcon19 CTF Quals Write-ups

Disclaimer: I didn't write any of these write-ups

http://ctfcentral.org/defcon/home.html

Challenge repository at Shell-storm.org
http://repo.shell-storm.org/CTF/Defcon-19-quals/

Write-up collections at http://devpsc.blogspot.com/2011/06/defcon-19-quals-writeup-collection.html

Several write-ups at http://daxnitro.com/quals/

Binary 100
http://blog.securestate.com/post/2011/06/06/Defcon-19-CTF-Pre-Quals-Binary-100-Challenge.aspx
http://neobits.org/?p=825 (Espanol)

Forensics 100
http://blizz.se/f100.html
http://www.bryceboe.com/2011/06/05/defcon-19-quals-forensics-100-and-forensics-300-solution/
http://www.phx2600.org/archive/2011/06/05/forensics-100-defcon-ctf-quals/

Shit My Dad Says

Just finished reading this book yesterday.

In short, it is a Twitter feed started by Justin Halpern,

who at the time was a semi-employed comedy writer.

It consists of quotes made by his father,

Sam, regarding random subjects.

This feed has 1,751,517 followers current and still counting.

Some of my favourite quotes:

“How the fuck should I know if it’s still good?

Eat it. You get sick, it wasn’t good.

You people, you think I got microscopic fucking eyes.”

"See, you think I give a shit.

Wrong. In fact, while you talk, I'm thinking;

How can I give less of shit?

That's why I look interested."

"Stop trying so hard. He doesn't like you.

Jesus, don't kiss an ass if it's in the process of shitting on you."

- taken from the official website

P/S: I love it when people get totally honest with me, even when they tell me shits.

Note to Self

Link to this webcomic

A small note to myself:

never mess with the bio science students in my class,

or else I will be chased by their highly-trained flying cuttlefish

(or flying roti canai =X)

P/S: yes, I know I'm a freak.