ASIS CTF Quals 2015 - Sawthis Writeup - Srand Remote Prediction

The remote service ask for a name, if you send more than 64 bytes, a memory leak happens.
The buffer next to the name's is the first random value used to init the srand()

If we get this value, and set our local srand([leaked] ^ [luckyNumber]) we will be able to predict the following randoms and win the game, but we have to see few details more ;)

The function used to read the input until the byte \n appears, but also up to 64 bytes, if we trigger this second condition there is not 0x00 and the print shows the random buffer :)

The nickname buffer:



The seed buffer:



So here it is clear, but let's see that the random values are computed with several gpu instructions which are decompiled incorrectly:







We tried to predict the random and aply the gpu divisions without luck :(



There was a missing detail in this predcitor, but there are always other creative ways to do the things.
We use the local software as a predictor, we inject the leaked seed on the local binary of the remote server and got a perfect syncronization, predicting the remote random values:




The process is a bit ugly becouse we combined automated process of leak exctraction and socket interactive mode, with the manual gdb macro.

The macro:

More information

1. Pentest Tools List
2. Hack Tools For Games
3. What Is Hacking Tools
4. Github Hacking Tools
5. Pentest Tools Open Source
6. Tools For Hacker
7. Pentest Tools Alternative
8. Hack Rom Tools
9. Pentest Tools
10. Pentest Tools Apk
11. Best Pentesting Tools 2018
12. Pentest Automation Tools
13. Hacker Tools Free
14. Easy Hack Tools
15. Hacker Search Tools
16. Hacker Tools For Pc
17. Pentest Tools Kali Linux
18. Hacking Tools For Beginners
19. Pentest Tools For Ubuntu
20. Pentest Tools Nmap
21. Pentest Tools Website Vulnerability
22. Pentest Tools Online
23. Hacking Tools For Windows 7
24. Top Pentest Tools
25. Hacking Tools For Beginners
26. Pentest Tools Subdomain
27. Hacker Tools Software
28. Hack Tools Github
29. Underground Hacker Sites
30. New Hacker Tools
31. Termux Hacking Tools 2019
32. Hacker Tools Apk
33. Bluetooth Hacking Tools Kali
34. Hacking Apps
35. New Hacker Tools
36. Pentest Tools Open Source
37. Nsa Hacker Tools
38. Hack Tools Github
39. Hackers Toolbox
40. Black Hat Hacker Tools
41. Android Hack Tools Github
42. Easy Hack Tools
43. Hacking Tools Kit
44. How To Install Pentest Tools In Ubuntu
45. Black Hat Hacker Tools
46. Hacking Tools Windows 10
47. Hack Tools
48. Github Hacking Tools
49. Hacking Tools For Windows 7
50. Hacks And Tools
51. Pentest Tools Website Vulnerability
52. Ethical Hacker Tools
53. Pentest Automation Tools
54. Hacking Tools Software
55. Pentest Tools Framework
56. Hack And Tools
57. Hack And Tools
58. Hacker
59. Hacking Tools For Mac
60. Hack Rom Tools
61. Hacking Apps
62. Hack Tools 2019
63. Pentest Tools Alternative
64. Hacking Tools Github
65. Hacking Tools Github
66. Pentest Tools Download
67. Bluetooth Hacking Tools Kali
68. Usb Pentest Tools
69. Nsa Hack Tools
70. Hack And Tools
71. Pentest Tools Find Subdomains
72. Hacker Tools 2019
73. Usb Pentest Tools
74. Best Pentesting Tools 2018
75. Hacker Security Tools
76. Hacking Tools For Mac
77. Android Hack Tools Github
78. Tools Used For Hacking
79. How To Make Hacking Tools
80. How To Install Pentest Tools In Ubuntu
81. Hacking App
82. Hacker Tools Mac
83. Hacking Tools For Kali Linux
84. Hack Tools For Mac
85. Hacker Tools Windows
86. Pentest Tools Website Vulnerability
87. Hacking Tools Github
88. Kik Hack Tools
89. Pentest Tools Framework
90. Hacker Tools Hardware
91. New Hacker Tools
92. Pentest Tools For Windows
93. Hack Website Online Tool
94. How To Install Pentest Tools In Ubuntu
95. Hacker Tools Online
96. Hacking Tools For Beginners
97. Hacking Tools Usb
98. Physical Pentest Tools
99. Hacker Tools For Windows
100. Hacker Tools Apk
101. Pentest Tools Windows
102. Hacking Tools Hardware
103. Hacking Tools Windows 10
104. Hacker Tools Hardware
105. Best Hacking Tools 2020
106. Hacker Tools Free
107. Best Hacking Tools 2019
108. Tools For Hacker
109. Pentest Tools For Android
110. Hacking Tools Name
111. Hacking Tools Windows 10
112. Hacking Tools For Pc
113. Hacking Tools Free Download
114. Hacking Tools Kit
115. Hacker Tools Apk
116. What Are Hacking Tools
117. Pentest Reporting Tools
118. Android Hack Tools Github
119. Pentest Tools Github
120. What Is Hacking Tools
121. Hacker Tools List
122. Best Pentesting Tools 2018
123. Hacker Tools Linux
124. Hacking Tools And Software
125. Hacking Tools Download
126. Hack Tools Online
127. Hacker Tools Windows
128. Physical Pentest Tools
129. Pentest Tools Find Subdomains
130. Tools For Hacker
131. Pentest Tools Website Vulnerability
132. Beginner Hacker Tools
133. Usb Pentest Tools
134. Pentest Tools Website Vulnerability
135. Tools 4 Hack
136. Tools Used For Hacking
137. How To Make Hacking Tools
138. Hacker Tools Github
139. Hacking Tools And Software
140. Hack And Tools
141. Hak5 Tools
142. How To Hack
143. Hack Tools Online
144. Hacking Tools For Pc
145. Hacker Tools Apk
146. Hacking Tools For Pc
147. Hacker Tools Software
148. Hacking Tools Free Download
149. Hacking Tools For Mac
150. Hacker Tools Windows