evandrix

Christmas CTF https://twitter.com/sudosev/status/1075213434273320960 https://pastebin.com/raw/7VL6usg6 https://pastebin.com/raw/Sm9PCxWv https://twitter.com/sudosev/status/1079069504498556930

HACKvent 2018 https://hackvent.hacking-lab.com

SANS Holiday Hack Challenge 2018 https://www.holidayhackchallenge.com/2018

GreHack 2018 https://2018.challenge.grehack.fr writeup https://www.synacktiv.com/posts/challenges/grehack-2018-qual...

CSAW Red Team Competition 2018 https://red.csaw.io/challenges

Hacktober.org https://hacktober.org

Advent Calendar of Advanced Cyber Fun 2018 https://xmas.rip repository https://github.com/takeshixx/advent-calendar-2018 writeup https://gist.githubusercontent.com/BenGardiner/03e2a7edeb764... writeup https://emanuelduss.ch/2018/12/advent-calendar-of-advanced-c...

OverTheWire Advent Bonanza 2018 https://advent2018.overthewire.org writeup https://ctftime.org/event/721/tasks

35C3 https://archive.aachen.ccc.de/35c3ctf.ccc.ac/challenges/inde... writeup https://ctftime.org/event/718/tasks

HITB-XCTF Dubai CTF 2018 https://ctftime.org/event/720

assembly

How does this match up to Launchy?

Where's the direct link to obtain a copy of this updated GeoLite data (Apr 2015) pls?

Paid App to do Haskell? pfft.

uTorrent offers a nice viz over a 3D globe

any chance tracing to a malicious server via this can attack scripts.mit.edu?

DEBUG = True error page when visiting http://csvoss.mit.edu/traceroute/request

@ http://i.imgur.com/ry9Voss.jpg

use `clang`, not `gcc`.

clang version 3.6.1 (tags/RELEASE_361/final) Target: x86_64-apple-darwin14.4.0 Thread model: posix

<-- can confirm it works out-of-the-box on OSX 10.10.4

link is down?

for large-scale EDA time-series viz, `gnuplot` has served me well, even understanding ms.

so where's the leak @? .torrent / pastebin ?

You can position your site behind CloudFlare's DDoS protection, eg. http://ht.transparencytoolkit.org

"Not through a web application vulnerability it can't (there is no application code to break!)." eg. metadata in images can contain executable code

page not found

you mean under `[alias]`, rather than 'aliases'

solved

Ah! that explains so much (and also why i've wasted a whole hour figuring out why what I observed was happening) I'm a CLI curl guy, rather than relying on these browsers which randomly would add a 0x0d 0x0a to my form submissions, for example. I also noticed that compiling (assembling-linking) the .S to execute it would not print anything (just hang there like a normal webserver), but I was getting stuff written to stdout with the final.c/webserver.c version using its shellcode.

ok, now it compiles, thanks for that. However, I'm getting an incomplete response "<h1>hello world</h1" without the trailing closing angled bracket. And when I try to run final.c after setting the FUNCTION_ADDR and ADDR as per your tutorial, I get some stray HTTP/1.0 200 and Content-type text/html being displayed on stdout as I start the program final.c (compiled to a.out by default)

Yes, segfault for me too after i changed ADDR preprocessor directive to the VMA address from objdump, as the instruction says. I'm on Ubuntu Linux 13.10 x64.

full-disclosure not mentioned in blog @ http://jordan-wright.github.io/blog/2013/10/14/automated-soc...

save disabled by author @ http://www.slideshare.net/brian_d_foy/json-regex

link to slides please?

there's always a "man" page (and Google) to look it up, stupid.

if you can't read the short flags, you shouldn't be reading my code.

pls release source and provide link on github.

you mean `poppler` instead of `libpoppler`

duplicate

If not, try logging in via Dropbox's web interface and download from it.