PotluckCTF

Potluck CTF - A CTF competition where the participants bring the challenges:

[blasty @bl4sty]

Here we can see @AnthropicAI's claude (Sonnet 3.7 model) talking to IDA pro to reverse engineer a CTF task I made for @PotluckCTF, it does pretty well! It manages to get a grasp of the entire custom VM instruction set, file format, syscall interface etc.🤓

The MCP server is based on @JH_Pointer's work, thanks! (I have a fork with some additions on my Github for those who care). The IDA MCP integration only has a few basic primitives right now. I think the next big useful one would be adding the ability to re-type stuff. Unmute the video if you want to hear a banger by @meganekomusic btw 🎵

[PotluckCTF @PotluckCTF]

The last trophy has been delivered and with that the event is truly and fully over. We will (probably) be back at the end of this year and planning will start on the CTF Discord (https://t.co/4WyRPRmKFd) this summer so make sure to join there if you want to provide input. Laters!

[PotluckCTF @PotluckCTF]

@0rganizers @DragonSectorCTF @FlatNetworkOrg Wow! That's no small compliment. Thank you! :D

[PotluckCTF @PotluckCTF]

After some shipping and other logistics delays I'm now proud to present the trophies for the 37C3 Potluck CTF. I will be handing these out to the winning teams.

Congratulations again to @DragonSectorCTF, @0rganizers and @FlatNetworkOrg! See you next time!

[udp @udp_ctf]

So the challenge i wrote for @PotluckCTF introduced a new heap house (which I shamelessly dubbed "house of water" after my two teams), and a general technique I dubbed "safe link double protect".

Both are now available here:
https://t.co/IqGo9rQoOu
https://t.co/2YX2C7EsTe

[PotluckCTF @PotluckCTF]

For those who want to try out the techniques in the write-up themselves you can now follow along with the challenge files published here: https://t.co/t1L5qdKyab

[PotluckCTF @PotluckCTF]

Apart from prizes for the top three teams we also had a write-up competition for the best write-up using @vector35's Binary Ninja.

I'm pleased to announce the winner: @masthoon from @Synacktiv with their fantastic write-up of the challenge "Pot of Gold": https://t.co/kxa111tQfQ

[PotluckCTF @PotluckCTF]

In the write-up they show how to utilize Binary Ninja's extensibility to implement the custom ISA employed by the challenge and reduce the complexity of the reversing process significantly. Great job and congratulations!

[PotluckCTF @PotluckCTF]

I have now open-sourced all the infrastructure and challenges from the event which you can find at https://t.co/piztRujV2m.

I want to again give a huge shoutout to all the challenge authors which made this #CTF a great experience for everyone involved!

[Bonus @BonusPlay3]

This low effort meme has been brought to you by @PotluckCTF.

[Synacktiv @Synacktiv]

Our ninja @masthoon solved a tough challenge during @PotluckCTF with an ingenious approach: he built a decompiler for a custom ISA by lifting instructions to Binary Ninja IL. Read the "Pot of Gold" write-up (kudos to @bl4sty for creating the challenge): https://t.co/jNJPIwqg5H

[PotluckCTF @PotluckCTF]

@bl4sty @Th3Zer0 @masthoon Very impressive! Don't forget that there is a write-up competition for the best write-up using Binary Ninja. Seems like this solution could be a great candidate.

[blasty @bl4sty]

I contributed a task to this year's @PotluckCTF that contains an emulator for a custom ISA. one of the players actually implemented a decompiler for it by lifting to binja's IL. mind you: this is a 24h long CTF! very neat to see current tooling makes things like this feasible!

[PotluckCTF @PotluckCTF]

The scoreboard and challenge info have now been archived at https://t.co/xWriolWc7T.

Don't forget that we also have a write-up competition running until Jan 5th. See the rules at https://t.co/rAIxl7JkKk

Challenges will be open-sources in the next few days. Stay tuned!

[Ivan Komarov (dfyz) @i_komarov]

For @PotluckCTF this year, I create a Linux kernel-themed pwnable challenge called auxv: https://t.co/wqI2g8VuWG. The CTF infrastructure is already down, but the challenge is very easy to run locally, so give it a try if you like exploring obscure corners of the Linux kernel! :)

[Dragon Sector @DragonSectorCTF]

Good Game! →→→ #37c3 Potluck CTF TOP 1 🥇💪

Kudos to @ZetaTwo for making the CTF happen!
https://t.co/T5OqJKSNoA

[rayanlecat @rayanlecat]

The CTF was really cool, thanks @PotluckCTF and @ZetaTwo 🔥.
I've just published a writeup on my blog for those interested:
https://t.co/yEMb0mjI1b

[udp @udp_ctf]

Made a fun little heap challenge for #37C3 @PotluckCTF called Tamagoyaki. It features a fun way to bypass protect_ptr without a leak I discovered while exploiting a bug.

It only got one solve during the CTF, so made a writeup: https://t.co/Jr2xppgUrb

[FluxFingers @fluxfingers]

Huge love to @ZetaTwo for organizing the @PotluckCTF at #37c7, it was a fantastic experience and we really enjoyed playing. 💚

[PotluckCTF @PotluckCTF]

That's a wrap! Thanks for everyone who participated in the community #CTF feast of the year! Thanks to all the authors and well played to all participants.

Congratulations to @DragonSectorCTF, @0rganizers and @FlatNetworkOrg for their great performances!

See you next time!