CTF: ASUS RT-AC66U router vulnerabilities problem-solving analysis-vulnerability warning-the black bar safety net

I'm on EFF's open wireless router campaign is very interested in, however they not at all on their device display. The rules of the game in the RT-AC66U are listed as may be used to attack the device. I have a personal RT-AC66U, so I decided for all the CTF participants to write a small tutorial...

Weak randomization seeds of vulnerability science-vulnerability warning-the black bar safety net

0x00 background Last week I attended a Bishop Fox and the BYU University organized CTF game, during the race I decided to try out the invasion about the scoring system, and I took intrusion of the recording process down. Although the client token cheat is not nothing new, but this time the invasi...

[Mellivora] Basic database driven CTF engine

Mellivora is a basic database driven CTF engine written in PHP. Requirements LAMP: PHP 5.3+, MySQL 5.5+, Apache 2.2+. May work with other configurations but this is untested. Installation Download to any directory, say: "/var/www/mellivora/". Create an Apache VHost and point DocumentRoot to...

EHACK : The Largest Information Security Awareness Marathon Globally

More than 9000+ participants enter the Guinness book of World Records for the largest congregation for information Security. E-Hack, world largest Ethical Hacking workshop was organized by InfySEC at SRM University on July 27 and 28,2013 . The expected participant count was 4500+ but on the day o...

EHACK : The Largest Information Security Awareness Marathon Globally

More than 9000+ participants enter the Guinness book of World Records for the largest congregation for information Security. E-Hack, world largest Ethical Hacking workshop was organized by InfySEC at SRM University on July 27 and 28,2013 . The expected participant count was 4500+ but on the day o...

Want to be the Part of History? Just be a part of E-HACK

E-HACK is an Information Security Workshop, organized by infySEC. The workshop aims at creating awareness about INFORMATION SECURITY by showing in what all ways information or data can be stolen. Meddle in cyber-warfare, battle with our machine master mind who will throw challenges on web...

Want to be the Part of History? Just be a part of E-HACK

E-HACK is an Information Security Workshop, organized by infySEC. The workshop aims at creating awareness about INFORMATION SECURITY by showing in what all ways information or data can be stolen. Meddle in cyber-warfare, battle with our machine master mind who will throw challenges on web...

Hack Battle at 'The Hacker Conference 2013' with CTF365

The Hacker Conference partnered up with CTF365 to provide the best CTF experience during the conference. While trying to find out more about their product and also about their CTF surprise, I got an interview with Marius Corici Co-founder and CEO for CTF365. Q: November 2012 was when you first...

CVE-2013-1539

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 3.1.0, 5.0.2 through 5.0.5, and 5.3.0 through 5.3.4 allows remote authenticated users to affect confidentiality via vectors related to CTF...

Design/Logic Flaw

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 3.1.0, 5.0.2 through 5.0.5, and 5.3.0 through 5.3.4 allows remote authenticated users to affect confidentiality via vectors related to CTF...

CVE-2013-1539

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 3.1.0, 5.0.2 through 5.0.5, and 5.3.0 through 5.3.4 allows remote authenticated users to affect confidentiality via vectors related to CTF...

CVE-2013-1539

CVE-2013-1539 concerns an unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Software . Affected versions are 2.8.0–3.1.0, 5.0.2–5.0.5, and 5.3.0–5.3.4 . The issue allows remote authenticated users to affect confidentiality via vectors related t...

PHPCollab 2.5 Unauthenticated Access

Date: 3/5/2012 Author: team ' and 1=1-- Software Link: http://www.phpcollab.com/ Version: 2.5 Vulnerability was found during the AthCon IT Security Conference CTF CTF organizer: echothrust We identified that the PhpCollab application installed under http://192.0.0.2/phpcollab/ allows the...

PHPCollab 2.5 Unauthenticated File Upload

Exploit Title: phpcollab upload files without any authentication Date: 3/5/2012 Author: team ' and 1=1-- Software Link: http://www.phpcollab.com/ Version: 2.5 Vulnerability was found during the AthCon IT Security Conference CTF CTF Organizer: echothrust During AthCon CTF the team ' and 1=1--...

Let's Play a Game of Cyber Security at CSAW CTF 2011

Let's Play a Game of Cyber Security at CSAW CTF 2011 Ready for a little game of capture the flag? What if you weren't running around a field like a crazy person trying to grab a flag out of someone's belt, but instead were navigating around a network overcoming technical challenges to find marker...

Let's Play a Game of Cyber Security at CSAW CTF 2011

Let's Play a Game of Cyber Security at CSAW CTF 2011 Ready for a little game of capture the flag? What if you weren't running around a field like a crazy person trying to grab a flag out of someone's belt, but instead were navigating around a network overcoming technical challenges to find marker...

Getting Dirty

Other firms sponsor contests at DEFCON as well. Dirtbags is one. The organization hosts CTF style contests around the country that are modeled on the DEFCON CTF...

Put It On the Board

The names that teams choose to represent themselves in the various tournaments at DEFCON say a lot. Here’s a shot of the score board for the Open CTF tournament. My favorite: ADRIAN LMAO, a jab at the now-infamous hacker who is responsible for turning Bradley Manning in to the federal authorities...

Hackers Got "Wired In"

Competition in the CTF contests is intense, with teams of hackers “wired in” as they might say in The Social Network and crowded around tables filled with laptops, cabling, soda, booze and junk food. Age is no obstacle, either, with some of the most skilled and technical hackers unable to legally...

Open Capture the Flag at DEFCON

Capture the Flag: A DEFCON tradition, the annual Capture the Flag CTF competition pits some of the world’s best teams of hackers against each other in an epic struggle for supremacy and bragging rights. This shot is from the Open CTF tournament – an “all comers welcome” alternative to the officia...