CTF team gives tutorial

The “Ufologists” CTF team has prepared tutorial:

Selected Exercises on Ethical Hacking from Security CTF Competitors

by Artem Blagodarenko, Konstantin Olshanov, Anton Rechkov, Sergey Cherementsev, and Alexander Boiko, Taganrog Institute of Technology – Southern Federal University, Taganrog, Russia

The tutorial can be interesting for someone who just introduced CTF for yourself and someone who already has CTF competition experience.  The tutorial is 6 hour long. CTF game basics are given while first 3 hours. Students can  try play CTF also at that time.

Advanced CTF game means are planned to be discuss it the second 3 hour part.

The tutorial is executed while CIN 2010 conference 7 of September. Work language is English.

Details at Ufologies team blog.

Dataflow-0.2.0 is now available

After month of development new features are available:

  1. Module’s functions recovering from binary code without any additional information;
  2. Binary program test SDK creation;
  3. Test loading to target binary program’s address space. Test executing. An analyzed binary continues executing in same mode as before test loading.

Thus, Dataflow-0.2.0 version can be used for in memory fuzzing performing.

You can download utility, watch screenshots  and release history from project home page. Dataflow is MaiWay project part. The Dataflow tutorial is also available. Enhanced features are described in The Dataflow tutorial . Part 2. Please, feel free send bug reports, suggestions etc. to authors.

Dataflow Tutorial. Part 2

The Project home page.

Some useful information you can see in Dataflow 0.1.1 Tutorial.

0.Installation

  1. Download dataflow-0.3.0.zip archive
  2. Unpack it anywhere (c:/temp, for example )
    Continue reading »

Fuzzing, фаззинг, in-memory fuzzing, фаззинг в памяти, vulnerability, уязвимсоти, binary code, бинарный код, static analysis, статический анализ, dynamic analysis, динамический анализ, fault injection, внедрение ошибок, CTF, information security, информационная безопасность, unit testing, тестирование