Potluck CTF - A CTF competition where the participants bring the challenges: https://xitter.cf/t.co/yVjd8PvsfB
Zürich, Switzerland
Joined November 2023
- Tweets40
- Following5
- Followers241
- Likes16
PotluckCTF retweeted
Here we can see @AnthropicAI's claude (Sonnet 3.7 model) talking to IDA pro to reverse engineer a CTF task I made for @PotluckCTF, it does pretty well! It manages to get a grasp of the entire custom VM instruction set, file format, syscall interface etc.🤓
The MCP server is based on @JH_Pointer's work, thanks! (I have a fork with some additions on my Github for those who care). The IDA MCP integration only has a few basic primitives right now. I think the next big useful one would be adding the ability to re-type stuff. Unmute the video if you want to hear a banger by @meganekomusic btw 🎵
The last trophy has been delivered and with that the event is truly and fully over. We will (probably) be back at the end of this year and planning will start on the CTF Discord (discord.gg/ArjWjvctft) this summer so make sure to join there if you want to provide input. Laters!
After some shipping and other logistics delays I'm now proud to present the trophies for the 37C3 Potluck CTF. I will be handing these out to the winning teams.
Congratulations again to @DragonSectorCTF, @0rganizers and @FlatNetworkOrg! See you next time! – at Zurich, Switzerland
ALT A picture of three trophies, each consisting of a clay figurine of the Potluck CTF logo on a wooden base with an engraved plaque with the three winning teams: Dragon Sector, organizers and TFNS
PotluckCTF retweeted
So the challenge i wrote for @PotluckCTF introduced a new heap house (which I shamelessly dubbed "house of water" after my two teams), and a general technique I dubbed "safe link double protect".
Both are now available here:
github.com/shellphish/how2he…
github.com/shellphish/how2he…
Made a fun little heap challenge for #37C3 @PotluckCTF called Tamagoyaki. It features a fun way to bypass protect_ptr without a leak I discovered while exploiting a bug.
It only got one solve during the CTF, so made a writeup: github.com/UDPctf/CTF-challe…
Apart from prizes for the top three teams we also had a write-up competition for the best write-up using @vector35's Binary Ninja.
I'm pleased to announce the winner: @masthoon from @Synacktiv with their fantastic write-up of the challenge "Pot of Gold": synacktiv.com/publications/l…
In the write-up they show how to utilize Binary Ninja's extensibility to implement the custom ISA employed by the challenge and reduce the complexity of the reversing process significantly. Great job and congratulations!
For those who want to try out the techniques in the write-up themselves you can now follow along with the challenge files published here: github.com/ZetaTwo/potluckct…
I have now open-sourced all the infrastructure and challenges from the event which you can find at github.com/zetatwo/potluckct….
I want to again give a huge shoutout to all the challenge authors which made this #CTF a great experience for everyone involved!
PotluckCTF retweeted
Our ninja @masthoon solved a tough challenge during @PotluckCTF with an ingenious approach: he built a decompiler for a custom ISA by lifting instructions to Binary Ninja IL. Read the "Pot of Gold" write-up (kudos to @bl4sty for creating the challenge): synacktiv.com/publications/l…
PotluckCTF retweeted
I contributed a task to this year's @PotluckCTF that contains an emulator for a custom ISA. one of the players actually implemented a decompiler for it by lifting to binja's IL. mind you: this is a 24h long CTF! very neat to see current tooling makes things like this feasible!
The scoreboard and challenge info have now been archived at 2023.potluckctf.com/.
Don't forget that we also have a write-up competition running until Jan 5th. See the rules at potluckctf.com/#prizes
Challenges will be open-sources in the next few days. Stay tuned!
PotluckCTF retweeted
For @PotluckCTF this year, I create a Linux kernel-themed pwnable challenge called auxv: github.com/dfyz/ctf-writeups…. The CTF infrastructure is already down, but the challenge is very easy to run locally, so give it a try if you like exploring obscure corners of the Linux kernel! :)
PotluckCTF retweeted
Good Game! →→→ #37c3 Potluck CTF TOP 1 🥇💪
Kudos to @ZetaTwo for making the CTF happen!
ctftime.org/event/2199
PotluckCTF retweeted
The CTF was really cool, thanks @PotluckCTF and @ZetaTwo 🔥.
I've just published a writeup on my blog for those interested:
rayanle.cat/potluckctf-2023-…
That's a wrap! Thanks for everyone who participated in the community #CTF feast of the year! Thanks to all the authors and well played to all participants.
Congratulations to @DragonSectorCTF, @0rganizers and @FlatNetworkOrg for their great performances!
See you next time!
ALT Screenshot of the 37C3 Potluck CTF final scoreboard showing Dragon Sector, organizers and The Flat Network Society in the top three.
PotluckCTF retweeted
Made a fun little heap challenge for #37C3 @PotluckCTF called Tamagoyaki. It features a fun way to bypass protect_ptr without a leak I discovered while exploiting a bug.
It only got one solve during the CTF, so made a writeup: github.com/UDPctf/CTF-challe…
PotluckCTF retweeted
Huge love to @ZetaTwo for organizing the @PotluckCTF at #37c7, it was a fantastic experience and we really enjoyed playing. 💚
That's a wrap! Thanks for everyone who participated in the community #CTF feast of the year! Thanks to all the authors and well played to all participants.
Congratulations to @DragonSectorCTF, @0rganizers and @FlatNetworkOrg for their great performances!
See you next time!
ALT Screenshot of the 37C3 Potluck CTF final scoreboard showing Dragon Sector, organizers and The Flat Network Society in the top three.
Less than an hour until the event starts and with almost 500(!) teams registered it will be one hell of a #CTF party!
Register and solve the challenges at play.potluckctf.com!
I took the opportunity to learn Prometheus and Grafana for the event so can we all agree to keep my graphs nice and smooth for the duration of the #CTF event?
We have about a day left until the feast starts, register now at play.potluckctf.com!
ALT A screenshot of a Grafana graph showing CPU usage across a number of CTF challenge servers. Some of the graphs are flat and some fluctuate quite a bit because of setup operations.