{"id":12656,"date":"2018-06-22T14:19:06","date_gmt":"2018-06-22T22:19:06","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/06\/22\/news-6424\/"},"modified":"2018-06-22T14:19:06","modified_gmt":"2018-06-22T22:19:06","slug":"news-6424","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2018\/06\/22\/news-6424\/","title":{"rendered":"beVX Conference Challenge \u2013 HiTB"},"content":{"rendered":"

Credit to Author: SSD \/ Noam Rathaus| Date: Fri, 22 Jun 2018 11:30:44 +0000<\/strong><\/p>\n

\n
\n

During the event of Hack In the Box, we launched an ARM reverse engineering and exploitation challenge and gave the attendees the change to win great prizes.<\/p>\n

The challenge was divided into two parts, a file – can be downloaded from here: https:\/\/www.beyondsecurity.com\/bevxcon\/bevx-challenge-10<\/a> – that you had to download and reverse engineer and server that you had to access to have a running version of this file.<\/p>\n

The challenge consisted of a binary that is acting as a ‘server’ which expects incoming connections to it, when an incoming connection occurs and a certain ‘protocol’ is implemented and it will print out ‘All your base’ and exit. The challenge was to write an exploit that will cause the program to print out ‘Belong to us!’.<\/p>\n

The intended way of solving this challenge was to preform an overflow and cause the execution path of the code to change, while one of the solutions provided did not follow this path – and was still able to change the output of the program.<\/p>\n

We received several submissions, only two were complete and solved the challenge completely, others were close but did not meet our minimum requirements and therefore are not presented here.
ebux25<\/strong>
In this submission, the execution path is not overwritten rather the string displayed is changed such that the program does not crash while it still prints the required string. While this was not the intended idea of the challenge, there was no rule against this kind of solution.<\/p>\n<\/p>\n

\t\t<\/p>\n

\n
<\/span> \t\t\t<\/p>\n
\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n

Python<\/span><\/div>\n<\/div>\n

<\/div>\n