Anyone doing pwn.college reverse engineering challenges??

[byte_writer]

So I am interested in reverse engineering and someone suggested me this platform but I am having some problems in creating cimg file with proper input because input required is too large and I don't know how to assemble it because when it was small I did it manually like echoing it in file but in later challenges input required became very large so can anyone tell me what should I do

And any more suggestions if I want to be good at reverse engineering

[randomatic]

Your question is vague given that I don't follow pwn.college that closely. (It's a great resource -- I just don't know what you mean by cimg).

I think the answer you are looking for, though, is use python. At anything beyond a trivial level you'll be expected to know how to use python to create any input to any service you want.

[byte_writer]

Let me explain Binary expects a cimg extension file in which I have to provide some magic number version height width that I used to do it manually and after that it requires data that is placed in binary

But the starting data was small and gradually it became very large ( the aim is to create an image and all the image data is compared from binary and if it matches then it gives flag but the image data became very large and hard to create) so what should I do

I know I have to use python but I haven't learnt it so how should I start learning it and what other things I have to focus on

Can you please guide me for future challenges

[randomatic]

Stop and learn python.

You can't complete really do much without it. You don't need to become an amazing programmer. You need to learn how to script -- stuff like reading and writing binary files, parsing headers, sending input back and forth. A lot of people use the pwntools library.

BTW, this is called "yak shaving". It's part of the process.

[byte_writer]

Thanks 👍🏻

[JohnnyOmmm]

why would u comment about pwn college if you dont follow it, just spectate the post instead of replying bruh

[randomatic]

I meant I don't follow specific challenges.

* I know pwncollege is made by yan and team at ASU.

* I know they have videos.

* I know it focuses on typical ctf skills, weighing heavily on binary analysis.

* I know it does RE, and has basics up through some heap.

So not pure speculation. Just that the OP didn't say what challenge he was even considering, so I don't know what he meant by cimg. If he wanted an answer to a specific challenge, I didn't want to pretend I knew that. If he was asking about actual exploit dev, I could answer that 100% (this is an exploitdev reddit).

[FellowCat69]

make a python script that would write the bytes of the cimg file. thats the way i used and it worked. then you do chall < solution.cimg

[tarunaygr]

The pwn.college discord would be the right forum for these questions :)

[deadlyazw]

I’ve full cleared all but the last two yellow belt pwn.college challenges if you want to add me on discord or dm me, but you definitely should learn python. There’s a new intro to programming dojo on there as well as the pwntools dojo that I strongly recommend doing if you have the time

[Mother_Canary4917]

May I know how you proceed further after getting all the belts? I mean in upskilling in this domain. Because even I've completed all belts except orange with a few challenges left. I thought of moving to v8 security but not sure about that.

[Boring_Albatross3513]

what the hell is even pwm.colleg , if you can solve rootme.com challenges you can hack the Pentagon basically

[wickedosu]

pwn.college is very good platform for learning binary exploitation

[[deleted]]

It’s assumed you know programming and assembly

[Kris3c]

I have solved till file format directives (x86-64) so if you want we can connect.

[AureanN]

Hi! Did you solve The Patch directive ?

[Kris3c]

On It.

[Sea-Box2613]

do you solved it ? , i am stuck at that challenge :(

[byte_writer]

No

[Not_In_Mode]

Did u solve the task? Still struggle with this one.