OpenBSD's heap hardening doesn't want you to exploit this one...

We're offering a WiFi Pod to the first person to write a reliable exploit for a heap underflow in Vixie Cron found by Dave Goldsmith of Supernetworks
supernetworks.org/CVE-2024-43688…

#CVE_2024_43688 #openbsd

Check out ps://t.co/y9ARlDESPq

HackingForSoju's captain, @Calaquendi44 , just got a Pwnie Award, accepted on her behalf by her sister (and also HFS member), @secretgardenctf

We are proud of both of you.

And thanks to our wonderful sponsors for supporting the event!
@osec_io @Margin_Research @trailofbits @cure53berlin @osmosis @HackingForSoju

Midnight Sun CTF Finals for 2024 featured some IOS challenges thanks to @CorelliumHQ 💪📱

Here is a blog post we wrote about it:
corellium.com/blog/midnight-…

-----BEGIN DICECTF 2024 FINALS DAY 1-----
@osec_io @Margin_Research @trailofbits @osmosis @cure53berlin @HackingForSoju

Public Service Announcement: Macs are not water(MER) proof. Meme by @avlidienbrunn

STOP THE COUNT!

Congratulations to all the teams that played @MidnightSunCTF last weekend. It was a fun adventure, we all enjoyed meeting and hanging out with you all.

There is a lot of cool, talented and humble people taking over security coming from the CTF scene.

We went to Stockholm,Sweden last weekend to participate in @MidnightSunCTF Finals and we had an absolute blast!!!
From being extremely well organised to having fun & amazing set of challenges, it was a super fun experience for the whole team.

An honor to host Pwn1v1 for @MidnightSunCTF @HackingForSoju

plans tonight

@ItayBel preparing for 1v1 pwn in a bit different way!!

Should be an interesting battle, some spicy names on the 1v1 pwn list this year.

Couple of memes I made for my @MidnightSunCTF talk. Amazing conference - big thanks to the organizers!

Tomorrow the fun begins, again. Thank you to everyone who helped during a trying time. Spirits are high, we are looking forward to meeting (and drinking) with all of you.

Happy to announce a lightning talk by @ian_roos (@PwnieAwards organiser).

The one and only @travisgoodspeed is giving a talk at Midnight Sun about Recovery Mask ROMs in 2024. We couldn't be more stoked and massive THANK YOU to Travis for coming back!

Don't forget to bring your 24 hour watch to @MidnightSunCTF in Stockholm!

I'll have a preprint of Microcontroller Exploits with me, available this September wherever fine books are sold.

Don't forget! @MagnetForensics is headed to Stockholm, Sweden this week for @MidnightSunCTF 2024! I'll have lots of swag with me... so come say hey!

We're #HIRING too :) jobs.lever.co/magnetforensic…

#GrayKey

The Deputy Minister of Defence of Ukraine for Digital Development, Digital Transformation and Digitalization ( @k_chernohorenko ) is giving a special talk at Midnight Sun CTF.

We are extremely appreciative to The Ministry of Defense of Ukraine. 🇺🇦🇸🇪🫶💪

#NATOforUkraine #blågul

it's hard for me to say if ctf players are more "enhanced" or "dehanced" (hindered) by leading edge models [ chatgpt, claude, gemini]

i'm definitely see it go both ways as hallucinations and inaccurate prompts lead time-limited players down confusing, bewildering rabbit holes

@defendtheworld When CTF players thought ptmalloc2 challs were hard, they generalised lots of practical attacks and forced glibc to make changes after a decade of ignoring theoretical ones.

Maybe now the weaponised autism can be used for the problem of validation/verification of LLM outputs.