<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>webstersprodigy.net &#187; defcon</title>
	<atom:link href="http://webstersprodigy.net/tag/defcon/feed/" rel="self" type="application/rss+xml" />
	<link>http://webstersprodigy.net</link>
	<description>Me trying to learn how to use a computer</description>
	<lastBuildDate>Sat, 04 Feb 2012 01:17:01 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>wargames reverseme</title>
		<link>http://webstersprodigy.net/2008/08/wargames-reverseme/</link>
		<comments>http://webstersprodigy.net/2008/08/wargames-reverseme/#comments</comments>
		<pubDate>Fri, 15 Aug 2008 18:52:16 +0000</pubDate>
		<dc:creator>webstersprodigy</dc:creator>
				<category><![CDATA[GrayHat]]></category>
		<category><![CDATA[ctf]]></category>
		<category><![CDATA[defcon]]></category>
		<category><![CDATA[reversing]]></category>

		<guid isPermaLink="false">http://webstersprodigy.net/?p=378</guid>
		<description><![CDATA[Defcon 16 was a lot of fun.  There were a lot of fun challenges, but my favorite was probably the wargames revereme in open capture the flag.]]></description>
			<content:encoded><![CDATA[<p>Defcon 16 was a lot of fun.&nbsp; There were a lot of fun challenges, but my favorite was probably the wargames revereme in open capture the flag.</p>
<p>You can download the binary <a href="http://webstersprodigy.net/oldwebsters/media/reverseme/wargames.bin">here</a>.&nbsp; Be careful, it can erase you hd.</p>
<p>It is an elf binary, and it runs fine on Linux.&nbsp; I ran in a (snapshotted) vm to hopefully mitigate some of the nasty things it could do &#8211; which luckily it did. It is packed with upx, which i found with strings, so first thing i unpacked it with upx-ucl.&nbsp; From there, I backtraced it with IDA and found the correct path for the key (which is thermonuclear war -&gt; US -&gt; St. Petersberg run as root).&nbsp; It then prints out the key before erasing your hd (more specifically your boot sector), so I put a breakpoint at the end to stop this from happening.</p>
<p>Anyway, this is a fun challenge.&nbsp; good luck!</p>
]]></content:encoded>
			<wfw:commentRss>http://webstersprodigy.net/2008/08/wargames-reverseme/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

