http://conference.hackinthebox.org/hitbsecconf2010kul/



hackinthebox
 ::  hitb portal  ::  hitb portal (SSL)  ::  hitb forum (SSL)  ::  hitb security conference  ::  hitb training ::  hitb irc  ::  hitb photos  ::  hitb videos :: 
Who's Online
There are 220 unregistered users and 0 registered users on-line.

You can log-in or register for a user account here.



Main Menu

Top Stories for Today
[419] How to Design a Secure DMZ
[400] German ID cards hacked by the CCC
[355] Malware hosted on Google Code project site
[256] Apple's elephant in the cloud
[228] Russian cops cuff 10 ransomware Trojan suspects
[227] Algerian Hackers Attack Wrong Website
[211] How Google attacks changed the security game
[199] Feds crack phone clone scam that cost Sprint $15m
[197] PSJailbreak code leaked online
[190] US undergrads crash NASA satellite into Arctic
[190] Heartland to pay Discover $5M for 2008 data breach
[189] How Your Cloud Dream Is Becoming a Security Nightmare
[188] Apple's iOS 4.1 ships Sept. 8
[182] Malaysian National Institute of Public Administration suffers cyber attack
[162] DARPA launches insider threat detection effort for military
[143] China demands real names from mobile phone users
[137] VMWare Sees Big Business In Becoming The Internet Operating System
[128] Windows Phone 7: Done

View the Top 50 articles

Top 20 of the Last 2 Weeks

Past Articles
Wednesday, September 01
·Moscow police investigate alleged ransomware gang
·Novell rolls cloud-security service
·More IT managers plan to spend less, survey finds
·Twitter Turns to OAuth for Application Authentication
·Verizon Uses VMware for Enterprise Cloud Service
·Five Things You Need To Know About IPv6
·iPhone 4 with New Antenna Coming Soon?
·Mark Zuckerberg fights to keep life private
·Android Tablet flood is imminent
·Hackers Steal $600,000 from Catholic Diocese
·Pirate Bay secures documentary funding from fans in just 3 days
·Darpa’s Star Hacker Looks to WikiLeak-Proof Pentagon
·Hackers Focus on Misconfigured Networks, Survey Finds
·Australian ban on PS3 hack extended to September 3
·Apple to offer live video stream of Wednesday's keynote
·US finally reforming its high-tech export control system
Tuesday, August 31
·Wikileaks moves servers to an underground nuclear bunker
·Indian e-voting critic released on bail
·Skype might be bought by Cisco
·Commonwealth Bank of Australia security upgrade causes ATM outage
·Google aims to wipe smile off Facebook
·Will Intel's Sandy Bridge pose a threat to discrete GPUs?
·3M to buy security firm Cogent for $943 million
·Microsoft to build giant data center
·Apple still hasn't fixed iPhone 4 proximity sensor bug
·7 skills every IT manager needs to survive the 2010s
·Intel buys wireless chip tech in mobile-phone push
·Hackers Port Android to Nokia Phones
·Old Apple QuickTime code puts IE users in harm's way
·India Could Face Onslaught of Pakistani Hackers, Say Intelligence Officials
 Older articles

Special Report: HITB2009 CTF Weapons of Mass Destruction
Posted by l33tdawg on Tuesday, February 09, 2010 - 06:40 AM (Reads: 1844)
Source: HITB

L33tdawg: This article was originally supposed to be released as part of Issue 001 of the new HITB Ezine but unfortunately did not make it in time for release. As such we've decided to put this out as a 'special release' instead of waiting for Issue 002. Speaking of which, if you'd like to contribute for the next issue, submissions are currently being accepted - for further details kindly email zarulshahrin@hackinthebox.org



A true 'hacker's conference' wouldn't be fun without a competition where hackers go head to head, tears are shed, and blood is spilled, and when we say blood we mean points. CTFs have always been about how good and fast you are at reversing and exploiting daemons and binaries. Sure it's fun and all but after a few years of the same thing, it's starts to get boring. Hence we decided to come up with CTF - Weapons of Mass Destruction (say it with me, destruktion!!!).

Let's face it, acquiring allies and launching nukes at rival teams is much more fun than just reversing binaries and stealing flags. Strategy is everything! The crew worked hard through out the year, planning the game mechanics, designing the world map, and coming up with complex challenges for the game. Though there were some quirks here and there on game day, miraculously we pulled it off. The nukes weren't the only thing that was different. We also had no prize money for this year's CTF but teams still signed up anyway purely for the bragging rights. You guys are f@#&king awesome!

So without further ado, the CTF crew brings you the writeup for Weapons of Mass Destruction 2009. Enjoy!

https://www.hackinthebox.org/misc/HITB-CTF2009-Special-Report.pdf

(Printer-friendly page Send this story to someone)

 
Top 10 Articles from the last 2 weeks for HITB News

· HITB News Postings

· Postings by l33tdawg


Login
 



 


 Log in Problems?
 New User? Sign Up!

HITB eZine Issue 003

Last 15 Postings to HITB Forum

Topics
· All topics
· AMD News (Aug 10, 2010)
· Apple News (Sep 02, 2010)
· Articles (Mar 03, 2009)
· Ask Us (Feb 01, 2003)
· Audio/Video (Sep 01, 2010)
· Encryption (Aug 30, 2010)
· Games (Aug 27, 2010)
· Hardware (Sep 01, 2010)
· HITB News (Aug 19, 2010)
· Industry News (Sep 02, 2010)
· Intel News (Aug 31, 2010)
· Law and Order (Sep 02, 2010)
· Linux (Aug 30, 2010)
· Microsoft (Sep 02, 2010)
· Networking (Sep 01, 2010)
· PDAs (Feb 09, 2007)
· Privacy (Sep 02, 2010)
· Red Hat (Mar 30, 2010)
· Science (Aug 30, 2010)
· Security (Sep 02, 2010)
· Software & Programming (Sep 02, 2010)
· Spam (Sep 01, 2010)
· Technology (Aug 30, 2010)
· Transmeta (Jul 07, 2007)
· Viruses & Malware (Sep 02, 2010)
· Wireless (Aug 26, 2010)

Packet Storm Security Latest
· nullconGoa2011-CFP.txt
The Call For Papers for nullcon Dwitiya 2.0 is now open. It takes place February 25th through the 26th, 2011 in Goa, India.
· amirocmsfaq-xss.txt
Amiro.CMS version 5.8.4.0 suffers from a stored cross site scripting vulnerability.
· advanced-xss.pdf
Whitepaper called Advanced XSS. Written in Arabic.
· moaub01-cpanel.pdf
Month Of Abysssec Undisclosed Bugs - Cpanel suffers from a PHP restriction bypass vulnerability. Versions 11.25 and below are affected.
· moaub01-adobe.pdf
Month Of Abysssec Undisclosed Bugs - Adobe Acrobat Reader and Flash Player suffer from a newclass invalid pointer vulnerability.
· MDVSA-2010-168.txt
Mandriva Linux Security Advisory 2010-168 - Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service and possibly execute some sources refer to this as a use-after-free issue. The updated packages have been patched to correct this issue.
· ZSL-2010-4961.txt
LEADTOOLS version 16.5.0.2 suffers from buffer overflow, integer overflow and denial of service vulnerabilities related to Active-X Common Dialogs.
· cpanelcp-xss.txt
cPanel Customer Portal suffers from a cross site scripting vulnerability.

Follow us
Join our Facebook Group

Follow us on Twitter

Follow our RSS feed


HITB Affiliates

Page created in 0.800287008286 seconds.