~?~

~?~

~?~

~?~

Matasano Security Contact Careers Home About Services Research We've teamed up with Square to run a joint Capture The Flag contest. Your target is a small embedded device; a microcontroller running compiled C code. You get access to the device, disassembly of its code, and a low-level debugger and assembler. We "run" the devices, you interact with them via a vanilla web interface. At each level, you'll get a simple input that, owing to some C software bug, can be used to own the target. You'll use the debugger to reverse the target, find the input, and then deliver it to a "production" instance to beat the level. You'll face a series of revisions of the target, starting from "comically broken" and proceeding vendor-fix by vendor-fix through basic memory corruption, stack overflows, randomization, memory protection schemes, allocator vulnerabilities, and DR...