nafod

VR/RE. CTF with @pfs_ctf and @Nautilus_CTF

[nafod @_nafod]

Thanks to everyone who participated in DEF CON CTF Finals. I hope everyone enjoyed the challenges we released!

It was an honor and a privilege to be part of @Nautilus_CTF and to contribute to the CTF for the past several years. Best of luck to whoever hosts it next!

[PFS @pfs_ctf]

1ST PLACE! Thanks so much to all the organizers, other finalists, and everyone who followed along and supported us. A special shout-out to @solarwine_ctf for staying strong til the end and getting top points! @hack_a_sat @defcon #HackASat

[nafod @_nafod]

@XiaoWei___ Hmm, I did not actually double check that. It may be some device either added due to my host or maybe due to auto-config for Ubuntu 18.04 guest. Sorry about that. Luckily, other devices would also work if you can hit the bulk transfer code

[nafod @_nafod]

Pwning VMware, Part 2: ZDI-19-421, a UHCI bug

https://t.co/fp5xOIKnSJ

[nafod @_nafod]

Pwning VMWare, Part 1: RWCTF 2018 Station-Escape

https://t.co/qvkMCO0FLb

[nafod @_nafod]

@NieDzejkob Makes sense, thanks!

[nafod @_nafod]

@NieDzejkob Which memfd are you racing here? Doesn’t the supervisor close its fds to your ELF, and the sandbox pid itself is CLOEXEC? Or is the sandbox memfd leaked or accessible in the container otherwise

[nafod @_nafod]

@NieDzejkob What was the final bug/escape? Can't find any other info online about the chal after spending some time on it

[nafod @_nafod]

There and Back Again: HITCON 2018's Super Hexagon

https://t.co/BInBBmJQFC

[nafod @_nafod]

My 2018 browser pwnable advent calendar writeup

https://t.co/oSJaO0neM6