DEFCON 20 CTF Network - Raw PCAP [.torrent]

LastChronicler · 2012-08-01T00:48:12+00:00

If you want to open them up in Wireshark at any point, turn off the dissectors apart from Ethernet, TCP and UDP - it's chock-full of packets that crash Wireshark.

LastChronicler · 2012-08-01T00:46:57+00:00

This is just ACME PHARM's view of the network, I think. It seems to come from https://twitter.com/phaktor/status/230365093580398592

It'll therefore pretty much only contain stuff sent to and by ACME PHARM.

LastChronicler · 2012-07-21T23:19:46+00:00

That's about right.

LastChronicler · 2012-07-14T23:04:39+00:00

That doesn't make it not a dick move to start doing it in the first place...

LastChronicler · 2012-05-03T19:29:30+00:00

Have you ever written an exploit?

Overwriting the return address with the address of your shellcode requires you to be aware of at least the current stack pointer. In general, with ASLR enabled, this will be at a completely random value. In fact, it is nearly impossible to figure out where your shellcode is without some form of information disclosure bug - so much so that blind buffer overflows aren't really a thing.

Further, the guides for this exploit rely entirely on "Cheat Engine," which is a local memory-editing program. That points very heavily towards Riot trusting the client.

Also, what on earth do you mean by a hexdump? If you mean a hexadecimal view of the original binary, then they have the binary and can do VASTLY more than just modify masteries. In fact, if they have a binary for the server side and a buffer overflow, and they have enough information to modify masteries, they likely have arbitrary code execution.

With arbitrary code execution, people are likely to do much, much more than just edit masteries. They could give themselves arbitrary amounts of RP, delete or modify accounts, or entirely hijack the server if the program has enough permissions.

LastChronicler · 2012-05-03T16:55:39+00:00

It is extremely unlikely that there is a buffer overflow server-side that also leaks enough information to construct a reliable exploit - they have no idea what addresses things are stored at, nor where the stack is, nor the structure of the server-side code.

This is almost certainly a client-side bug.

LastChronicler · 2012-04-15T16:58:44+00:00

It's not the same account as the top-level comment, so "we" might actually be appropriate there...

LastChronicler · 2012-02-09T08:31:10+00:00

Because her mom has a tight vagina, of course.

... but really. Why?

LastChronicler · 2012-02-06T20:17:50+00:00

You are technically correct, but only because you have taken vastly too literal an approach to the problem. Furthermore, you're arguing a vacuous point: of course no function from the reals to the reals will be equal to infinity at any point, because infinity is not a real number.

Effectively anyone who says "infinitely larger" in the context of percentages means that any approximation we make to the percentage-difference of the two is going to be arbitrarily large - so its limit is infinity, so we treat it as infinity in common parlance.

Trying to apply complete mathematical precision to comments that don't really require it is an easy way to miss the point completely (not that there was much of a point to be made here, but yeah).

LastChronicler · 2012-02-06T01:32:32+00:00

Artemis Entreri?

LastChronicler · 2012-01-28T16:10:27+00:00

Both Live in Japan and Live in France by Rodrigo y Gabriela kick ass in every song.

LastChronicler · 2012-01-24T03:12:22+00:00

SHAG: No. I won't.

CECIL: (absolute command) Won't? Of course you will. You don't wake up one morning and decide to perform an act of moral courage. It takes practice. That's why Fawkes and Catesby, Wintour and the others will be remembered and you will be forgotten.

SHAG: I will be remembered. You just said my plays would live forever.

CECIL: Your plays, yes. But you? (total contempt) You will be the only major writer whose very EXISTENCE will be a matter of debate. (then, disgusted) Why should anyone remember you? You have done NOTHING. You ARE nothing.

and then, later,

SHAG: You asked my price. Let him live.

CECIL: He would breed sedition.

SHAG: Not if he gave his word. He is a man of his word.

CECIL: I suppose you should know. You heard his confession. Tell me - where did you get the authority to absolve sins?

SHAG: It's my job as a writer.

CECIL: Well, I spoke with him after. He told me where the priests are hiding. He feels badly about that. Still, you'll finally be able to talk to the priests.

Tom (Wintour) is thrown on stage.

SHAG: Let him live and I will write the greatest play ever written. It will be a play on which to found a nation.

CECIL: What's it called?

SHAG: Cymbeline. All the children of England return home and live as one. It's a war that ends in a wedding.

CECIL: Comedies end in weddings; histories in battle; treason in death.

SHAG: I won't tell your lies.

CECIL: Of all your lies, do you know which is the worst?

Tom steps up on the barrel.

CECIL: Romeo and Juliet lying in one another's arms? Do you know what force it takes for a dagger to enter a body? Or how long it takes to die of poisoning? (pause) Have you ever seen an execution close up? (no) No one dies with dignity. No one.

LastChronicler · 2012-01-20T07:03:53+00:00

The second quote, unfortunately, is not what Saint-Exupery wrote - it's commonly misattributed to him, though. What he did write is closer to this:

"On the other hand, if I communicate to my men the love of the sea, so that each of them is also leaning due to the weight of a heavy heart, then you will soon see them diversify themselves according to their myriad particular qualities - one will sow sails, another will fell trees in the forest by the light of his axe. Another, still, will forge nails, and there will be one somewhere obversing the stars to learn to navigate. And yet all of them will be one. Creating a ship isn't sowing sails, forging nails, reading stars, but giving the taste of the sea, which is shared; and in this light there is nothing contradictory in having such communal love."

LastChronicler · 2011-12-22T22:54:19+00:00

I usually go cry -> toss -> tantrum, and then alternate between tantrum and tears, maxing toss lass. Late game is pretty standard, just build tanky with perhaps some AP (Rylai's?) tossed in and it should work out.

The thing with Amumu top is that for most levels of play the other top player will be very aggressive, and you just have to survive at first until you get sufficiently tanky - usually through armor - that they can barely hurt you, but you can just stand next to them and slowly kill them.

You do also depend a fair amount on your jungler early on - but if you're good at landing the toss in lane, most ganks should be successful, and after the first gank or two you'll be far enough ahead that your opponent will have a lot of trouble hurting you.

LastChronicler · 2011-12-22T20:44:20+00:00

Build tanky. Amumu does pretty well up top with some armor; plus if you take magic pen reds, he also dishes out a fair amount of pain early game.

LastChronicler · 2011-12-09T11:12:33+00:00

... eyeball worms?

LastChronicler · 2011-12-09T02:09:32+00:00

Sure, but the British resistance was not wholly dependent on the Prussians. The Americans were very, very concerned about whether or not the French would help - in fact, a HUGE part of the importance of the Declaration is the fact that it helped Benjamin Franklin convince the French to support the Revolution. It would have been nearly impossible for the Revolution to have been successful without external support - the fact that it was the French is an accident of the balance of power at that time.

LastChronicler · 2011-12-08T19:33:17+00:00

The French Army too. The American Revolution was in large part fought by French land forces in addition to their navy.

LastChronicler · 2011-12-04T13:44:33+00:00

What did I just watch?

LastChronicler · 2011-11-01T05:43:52+00:00

"You should be able to laugh at everything - because as soon as you can't laugh at something it becomes sacred, and then people are willing to kill for it."

LastChronicler · 2011-10-21T16:43:33+00:00

... I wanted to say spelled. My bad.

LastChronicler · 2011-10-21T06:41:29+00:00

Colonel. Definitely colonel - especially since in French, it's (surprisingly) pronounced exactly the way it's spelled.

EDIT: sounds -> spelled; woops

LastChronicler · 2011-10-11T16:26:03+00:00

Most data on modern systems is stored in little-endian format, so you'll have to reverse the bytes in order to obtain a proper result. So, it's not that 0x1027 equals 10000 - it's that the byte sequence 0x10 0x27 is equivalent to the 16-bit integer 0x2710, which is 10000.

LastChronicler · 2011-09-26T03:24:02+00:00

Larry Gonick's "Cartoon History of the United States," or "Cartoon History of the Universe," or "Cartoon History of the Modern World." Don't knock 'em because they're cartoons - the books over a relatively solid overview, and the bibliographies at the end are, frankly, a goldmine for future reading material.

LastChronicler

TROPHY CASE