ASIS CTF Quals 2015 - Sawthis Writeup - Srand Remote Prediction
The remote service ask for a name, if you send more than 64 bytes, a memory leak happens.
The buffer next to the name's is the first random value used to init the srand()
If we get this value, and set our local srand([leaked] ^ [luckyNumber]) we will be able to predict the following randoms and win the game, but we have to see few details more ;)
The function used to read the input until the byte \n appears, but also up to 64 bytes, if we trigger this second condition there is not 0x00 and the print shows the random buffer :)
The nickname buffer:
The seed buffer:
So here it is clear, but let's see that the random values are computed with several gpu instructions which are decompiled incorrectly:
We tried to predict the random and aply the gpu divisions without luck :(
There was a missing detail in this predcitor, but there are always other creative ways to do the things.
We use the local software as a predictor, we inject the leaked seed on the local binary of the remote server and got a perfect syncronization, predicting the remote random values:
The process is a bit ugly becouse we combined automated process of leak exctraction and socket interactive mode, with the manual gdb macro.
The macro:
Related posts
- Pentest Tools Android
- Tools 4 Hack
- Pentest Box Tools Download
- Usb Pentest Tools
- Hacker Tools For Windows
- Hacker Tools
- Hacker Tools Linux
- Hacking Tools For Windows Free Download
- Hacker
- Kik Hack Tools
- Hacker Tools Free Download
- How To Hack
- Growth Hacker Tools
- Hacking Tools Windows 10
- Free Pentest Tools For Windows
- Hacking Tools Online
- Pentest Tools For Ubuntu
- Hacking Tools Free Download
- Pentest Tools Open Source
- Pentest Tools Alternative
- Pentest Tools Port Scanner
- Hack Tools For Mac
- Hacker Tools Software
- Usb Pentest Tools
- Pentest Tools For Windows
- New Hacker Tools
- Pentest Tools
- Pentest Automation Tools
- Hacker Tools Apk Download
- Install Pentest Tools Ubuntu
- Best Pentesting Tools 2018
- Hacking Tools For Beginners
- Pentest Tools Find Subdomains
- Pentest Tools Url Fuzzer
- Hacker Tools Free
- Hack Rom Tools
- Pentest Recon Tools
- Hacker Tools For Pc
- Growth Hacker Tools
- Pentest Tools For Android
- Hacker Tools Hardware
- Top Pentest Tools
- Hacking Tools 2019
- Hacking Tools Free Download
- Hack Tools 2019
- Hack Tools Github
- Best Pentesting Tools 2018
- Hacking Tools For Windows Free Download
- Hacker Hardware Tools
- Hacker
- Hacker Tools Hardware
- Pentest Tools Bluekeep
- Pentest Tools Find Subdomains
- Blackhat Hacker Tools
- Pentest Tools For Ubuntu
- Hacking Tools For Windows
- How To Make Hacking Tools
- Pentest Tools Framework
- Hackers Toolbox
- Pentest Tools Online
- Hacker Tools Apk
- Hacker Tools
- Pentest Tools
- Hacking Tools Hardware
- Hak5 Tools
- Free Pentest Tools For Windows
- Android Hack Tools Github
- Hack Tools 2019
- Hacking Tools Hardware
- What Are Hacking Tools
- How To Install Pentest Tools In Ubuntu
- Hacker Tools Software
- Pentest Tools Alternative
- Underground Hacker Sites
- Hack And Tools
- Free Pentest Tools For Windows
- New Hack Tools
- Pentest Tools Tcp Port Scanner
- Hacks And Tools
- Pentest Tools Linux
- Pentest Tools Github
- Hack Tools
- Hacker Search Tools
- Pentest Tools For Ubuntu
- Pentest Tools Alternative
- Pentest Tools Linux
- Pentest Recon Tools
- Pentest Tools For Windows
- Beginner Hacker Tools
- Best Pentesting Tools 2018
- Hacking Tools Usb
- Pentest Tools Github
- Hacker Tool Kit
- Hack Tools
- Hacker Tool Kit
- Pentest Tools Bluekeep
- Pentest Tools List
- Hack Website Online Tool
- Kik Hack Tools
- Hacker Tools Windows
- Pentest Tools Website Vulnerability
- Hacker Tools For Mac
- Wifi Hacker Tools For Windows
- Hack Tools For Pc
- Hacker Tools Hardware
- How To Hack
- Pentest Tools For Windows
- Pentest Tools Apk
- Hacker Tools Hardware
- Pentest Tools Website
- Top Pentest Tools
- Hak5 Tools
- Hacker Tools List
- Hack App
- Hacker Tools Windows
- Hacking Tools Free Download
- Hack Tools Download
- Hack Tool Apk
- Hack Tool Apk No Root
- Hack Rom Tools
- Bluetooth Hacking Tools Kali
- Hacking Tools Name
- Hacker Tools Software
- Hacking Tools Pc
- Tools Used For Hacking
- Hacking Tools For Kali Linux
- Hacking Tools 2019
- Physical Pentest Tools
- Underground Hacker Sites
- Free Pentest Tools For Windows
- Hacking Tools For Mac
- What Is Hacking Tools
- Usb Pentest Tools
0 Comments:
Post a Comment
<< Home