{"id":40,"date":"2005-08-01T17:16:09","date_gmt":"2005-08-02T00:16:09","guid":{"rendered":"http:\/\/outflux.net\/blog\/archives\/2005\/08\/01\/plan-b-sucked\/"},"modified":"2005-08-01T20:02:42","modified_gmt":"2005-08-02T03:02:42","slug":"plan-b-sucked","status":"publish","type":"post","link":"https:\/\/outflux.net\/blog\/archives\/2005\/08\/01\/plan-b-sucked\/","title":{"rendered":"Plan B sucked!"},"content":{"rendered":"<p>Well, our team of 3 didn&#8217;t do so well at CTF this year (4th in teams).  But, I guess, holding our own against teams with 20+ people on them is kind of good.  The game&#8217;s network was organized very differently from years past, and we had no way for inline Snort to work.  They held the machines locally (in a FreeBSD jail), and we just got a network drop so we could share the network with our server.  That was pretty disappointing, but I think it made the game much more pure.  This year&#8217;s focus was on code auditing and binary analysis.<\/p>\n<p>Both of my basic goals were achieved though:<\/p>\n<ul>\n<li>Not come in last<\/li>\n<li>Modify the token scoring tool to play <a href=\"http:\/\/outflux.net\/sounds\/exclamations\/\">victory WAV<\/a>s any time we scored a point.  That worked very well and was a great motivator.<\/li>\n<\/ul>\n<p>I guess I&#8217;m going to have to really get cracking with some gdb programming work.  Jesse&#8217;s auto-stack-overflow-detector rocks, and I think that can be seriously expanded, if not hooked up to Metasploit directly.<\/p>\n<p style='text-align:left'>&copy; 2005, <a href=\"https:\/\/outflux.net\/blog\/\">Kees Cook<\/a>. This work is licensed under a <a rel=\"license\" href=\"http:\/\/creativecommons.org\/licenses\/by-sa\/4.0\/\">Creative Commons Attribution-ShareAlike 4.0 License<\/a>.<br \/><a rel=\"license\" href=\"http:\/\/creativecommons.org\/licenses\/by-sa\/4.0\/\"><img decoding=\"async\" alt=\"CC BY-SA 4.0\" style=\"border-width:0\" src=\"https:\/\/i.creativecommons.org\/l\/by-sa\/4.0\/88x31.png\" \/><\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Well, our team of 3 didn&#8217;t do so well at CTF this year (4th in teams). But, I guess, holding our own against teams with 20+ people on them is kind of good. The game&#8217;s network was organized very differently from years past, and we had no way for inline Snort to work. They held [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/posts\/40"}],"collection":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/comments?post=40"}],"version-history":[{"count":0,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/posts\/40\/revisions"}],"wp:attachment":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/media?parent=40"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/categories?post=40"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/tags?post=40"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}