January 2018 - 0xEvilC0de.com

Exploring the Process Environment Block (PEB) with WinDbg

January 28, 2018 Josh Stroschein malware, reversing

The source code for this example can be found here. The assembly is: mov ebx, fs:[ 0x30 ] ; // get a pointer to the PEB mov ebx, [ ebx + 0x0C ] ; // get PEB->Ldr mov ebx, [ ebx + 0x1C ] ;// PEB->Ldr.InInitializationOrderModuleList mov ebx, [ ebx + 0x08 ] ; // get the entries base address

02 – Joining A CTF

January 26, 2018 Josh Stroschein Help & How-To

Once you have created an account, you may either decide to join a public or private competition. If you cannot find the competition you joined, try checking both the Live & Inactive competition tabs within the left sidemenu. Joining a public competition On the home page, click the side menu tab on the left Find a Public Competition. From here you may view a list of public competitions currently active on the site. Joining a private competition While on the home page, ensure that either Live Competitions or Inactive Competitions is selected within the left sidemenu. Click on the green…

03 – Creating a CTF Competition

January 24, 2018 Josh Stroschein Help & How-To

01 – Registering Your Account

January 24, 2018 Josh Stroschein Help & How-To

The first step in getting started with the platform is to create an account, which you can do here: http://ctf.0xevilc0de.com/register You won’t need to provide much information, but be certain to use an email address you have access to in the event that you need to reset your password. The name you provide will be displayed in the scoreboard during a competition. Once your account is created you will be able to login to the system. Keep in mind that you are now a regular user and only have access to publicly accessible CTFs and private CTFs that you have…

Getting Started

January 24, 2018 Josh Stroschein CTF Framework

Welcome to the 0xEvilC0de Capture-The-Flag (CTF) Framework! This framework was designed and developed from the ground-up from faculty and students at Dakota State University. You can access the framework at no cost at the following URL: https://ctf.0xevilc0de.com Why Another CTF Framework? Capture-the-flag (CTF) competitions provide dynamic, real-time environments intended to engage and challenge the participants. However, they are often not designed to focus on educational objectives, but rather present a series of challenges with little to no direction. This forces participants to learn as a by-product of their desire to complete a challenge, and not through a guided series of…