meetings

OrientDB is GraphQL under the hood, but implements its own dialect of SQL to make developers feel more comfortable. Unfortunately, despite being listed as fully supported, their Python library never quite implemented parameterized queries. This means that injection exploits are there for the taking if we can just figure out how to make them work using the non-standard SQL. This meeting will be spent getting back to basics on SQLi strategies. A test system will be available and at least one solution will be shared.

The CMU picoCTF is ongoing now (it is a two week event). Lots of challenges spread out in the normal categories.

Sometimes you come across a virtual machine or CPU description with an executable image that you want to reverse engineer. For instance, this challenge from Synacor has about 21 instructions: https://challenge.synacor.com/ . If we implement the CPU semantics in Ghidra, we should be able to get disassembly and decompilation. Feel free to download the challenge and attempt writing a VM emulator or getting a sense of the opcodes. During the meeting, we will work on adding support for the CPU architecture to Ghidra.

We will do a presenter-lead walkthrough of reversing an “easy” Android application and then have a second application for participant practice during the meeting.

https://exploit.education/phoenix/

This is a set of binaries with increasing level of difficulties to teach “textbook” exploitation on Linux. We will present a bit of theory first, and then dive into the challenges. The binaries are provided as a Qemu image, so try to set that up in advance.

Tilver will be presenting on some of the things that he’s encountered in the wild (during professional engagements), and techniques they use when testing.