CSAW CTF Finals 2020 Writeups

Al Capwn participated in the online CSAW CTF Finals 2020 from the India region. We stood 6th in the region scoring 2101 points. We did miss going to IIT Kanpur for the offline event, but, nonetheless we had tons of fun! Web - Picgram - 100 Check out this new photo upload service! Hopefully you won’t be able to do anything spooky with it. http://web.chal.csaw.io:5000 The challenge downloads contained the server’s Dockerfile and Flask server script.
Read more →

Clocks, Timers and Virtualization

The aim of this post is to learn the kinds of clocks and timing mechanism’s available on an x86 system, how they are virtualized by different hypervisors (with a focus on Hyper-V and WSL2) and what is the practical resolution of clocks and timers in both virtualized and bare-metal x86 systems accessible via programming languages like C or Golang. Clocks and Timers A system might have two kinds of clocks available to use in the system, a Wall-Clock Timer and a Monotonic Clock.
Read more →

Papers: BinRec: Dynamic Binary Lifting and Recompilation

A summary of the paper BinRec: Dynamic Binary Lifting and Recompilation presented at EuroSys'20. BinRec is novel tool for binary lifting and recompilation which uses dynamic techniques to generate new binaries, in contrast to existing biniary recompilers like McSema and Rev.Ng which use static analysis and heuristic techniques to facilitate recompilation. BinRec employs dynamic analysis to lift binary code to LLVM IR and subsequently lowers it back to machine code, producing a “recovered” binary.
Read more →

Practical Papers: Chord, A Scalable Peer-To-Peer Lookup Protocol

The post is an explanation of the Chord protocol and discussion of my implementation of the same in Golang. Chord is one of the original Distributed Hash Table projects from the MIT PDOS group at Computer Science and AI Laboratory, MIT. Here is a link to the original research for your reading pleasure. I was introduced to Chord by the book Distributed Systems by Maarten van Steen and Andrew S.
Read more →

Bits & Signals: Qatar International Cybersecurity Competition

TL;DR: Al Capwn goes international! We won the second prize hacking hardware with our 15$ (1000 INR) SDR and Logic Analyzer in Doha, Qatar! In October 2019, Members of Al Capwn flew from New Delhi, India to Doha, Qatar to attend Qatar International Cybersecurity Contest at Hamad Bin Khalifa University. We are thankful of HBKU for sponsoring the complete trip. Specfically, We participated in the Qatar International Hacking Contest, a hardware hacking competition.
Read more →