delroth's homepage

It all begins with one scary email late at night just before I had to go to sleep: From: abuse@hetzner.com Date: 2024-10-29 01:03:00 CET Subject: AbuseInfo: Potential Security issue: AS24940: 195.201.9.37 We have received an abuse report from abuse@watch…

At the last NixCon in Darmstadt and later in private followup conversations I had the opportunity to talk with a lot of amazing fellow NixOS contributors about NixOS security, and how we could improve it in the future.

This blog post is a copy of an article I posted on the /r/emulation subreddit regarding the recent Dolphin / Valve / Nintendo “drama”.

Been a while since I last took the time to solve a CTF challenge.

Since the release of Dolphin 3.5 half a year ago, audio processing in Dolphin has changed a lot.

The Nuit du Hack CTF 2013 Quals round was taking place yesterday.

MysteryBox was a remote server disassembling and running its input data for an unknown RISC-like CPU.

rtfm-67cc5dcb69df4244bcf2d573481e6d6a06b861a3: ELF 32-bit LSB executable rtfm-e24f03bb1204f8e3d40fae8ac135187a11b0ba5c: data rtfm is a binary processing ASCII input files and outputting seemingly compressed versions of these files: testing on a few long…

hackthegibson: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.15, BuildID[sha1]=0xb8515e4280130d84d4b4e1fd492da1b099ec0eb6, stripped hackthegibson is a 64-bit ELF for Linux using OpenSSL (l…

For the last two weeks, I’ve been working on enhancements and bug fixes related to audio processing in the Dolphin Emulator (the only Gamecube/Wii emulator that allows playing commercial games at the moment).

I really enjoy reverse engineering stuff.

This article was co-authored with Samuel Chevet.

Once upon a time, Stefan Esser from the Hitmen programmed an IDA loader plugin to be able to analyze DOL files, which is the executable format used for Gamecube and Wii.

Recently Stripe (a startup trying to improve online payments for web developers) put online a fun CTF challenge with simple security exercises.

What I mean by reading a Wii disc is simple: from a Wii DVD image, being able to get metadata about the game, like its name or its unique ID, but also being able to read the filesystem on the disc to access the game executable and data.

Most games nowadays avoid hardcoding behavior in the main program code.

As in the other binary l33tness problems, only a single file was provided in the problem description: b300_b258110ad2d6100c4b8: gzip compressed data Decompressing this gives us a tar archive containing these files: ./0/ ./0/heap-dump-tm1306902723-pid1295…

gb100 took a lot of time to pwn for us as we ran out of ideas really fast and it was mostly guessing.

Eri HaKawai is a new exploit for PAL Wiis, which works for all currently released System Menu versions (<= 4.3).

This last Christmas I was happy to get gifted a brand new Nintendo Wii (“25 years of Mario” version) from someone in my family.