{"id":78,"date":"2006-01-17T17:49:45","date_gmt":"2006-01-18T00:49:45","guid":{"rendered":"http:\/\/outflux.net\/blog\/archives\/2006\/01\/17\/ngsec-games\/"},"modified":"2006-01-17T17:49:45","modified_gmt":"2006-01-18T00:49:45","slug":"ngsec-games","status":"publish","type":"post","link":"https:\/\/outflux.net\/blog\/archives\/2006\/01\/17\/ngsec-games\/","title":{"rendered":"ngsec games"},"content":{"rendered":"<p>Today I was reminded of the NGsec <a href=\"http:\/\/quiz.ngsec.com\/game1\/\">security games<\/a> site from a <a href=\"http:\/\/www.defcon.org\/\">DefCon<\/a> CTF team-mate.  (This game was actually used as a prequal for DefCon 10, which I didn&#8217;t go to.  Ken told me stories about it, though.)  I burned through stages 1-9 in about 45 minutes, and then hit stage 10 and was side-tracked learning about <a href=\"http:\/\/www.phrack.org\/show.php?p=58&#038;a=5\">encrypted ELF<\/a> binaries.<\/p>\n<p>There continues to be no useful FOSS binary analyzers for this kind of reverse engineering.  gdb just doesn&#8217;t even begin to cut it: it was made for (surprise!) debugging programs built by friendly compilers, not doing forensics on decidedly unfriendly, hand-crafted binaries .  If <a href=\"http:\/\/paulgraham.com\/procrastination.html\">Paul Graham<\/a> and <a href=\"http:\/\/paulgraham.com\/hamming.html\">Richard Hamming<\/a> are to be believed:<\/p>\n<ol>\n<li>What are the most important problems in your field?<\/li>\n<li>Are you working on one of them?<\/li>\n<li>Why not?<\/li>\n<\/ol>\n<p>I should be writing a static binary analyzer.  And a dynamic one too.  GPL IDApro replacement.  Yeow.<\/p>\n<p style='text-align:left'>&copy; 2006, <a href=\"https:\/\/outflux.net\/blog\/\">Kees Cook<\/a>. This work is licensed under a <a rel=\"license\" href=\"http:\/\/creativecommons.org\/licenses\/by-sa\/4.0\/\">Creative Commons Attribution-ShareAlike 4.0 License<\/a>.<br \/><a rel=\"license\" href=\"http:\/\/creativecommons.org\/licenses\/by-sa\/4.0\/\"><img decoding=\"async\" alt=\"CC BY-SA 4.0\" style=\"border-width:0\" src=\"https:\/\/i.creativecommons.org\/l\/by-sa\/4.0\/88x31.png\" \/><\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Today I was reminded of the NGsec security games site from a DefCon CTF team-mate. (This game was actually used as a prequal for DefCon 10, which I didn&#8217;t go to. Ken told me stories about it, though.) I burned through stages 1-9 in about 45 minutes, and then hit stage 10 and was side-tracked [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10,6],"tags":[],"_links":{"self":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/posts\/78"}],"collection":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/comments?post=78"}],"version-history":[{"count":0,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/posts\/78\/revisions"}],"wp:attachment":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/media?parent=78"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/categories?post=78"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/tags?post=78"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}