ClevCode

So many AI agent orchestration frameworks and “operating systems” are being released right now, that claim to be built with security in mind – proudly listing their extensive security features, related to everything from their use of cryptography to sandb…

End of an era.

What would have I done differently, in the Ashley Madison case, knowing what I know now.

As I mentioned in my previous post, Immersed (https://immersed.com) is a great multi-platform (Linux/macOS/Windows) solution for sharing your screens to a VR environment.

Immersed (https://immersed.com) is a multi-platform solution (Linux/macOS/Windows) for sharing your monitors (including a couple of virtual ones) to a VR environment.

This is my write-up for the maze challenge in the 31C3 CTF, that I played with the Hacking For Soju team.

This is my exploit for the Citadel challenge in the Ghost in The Shellcode 2015 Teaser CTF.

This was the only challenge remaining for us (ClevCode Rising) in the GITS 2015 Teaser CTF (http://ghostintheshellcode.com/2015-teaser/finalscores.txt), after I had solved the Citadel challenge and my team mate Zelik had solved Lost in Time.

This post is directed to the people that share my interest in learning and understanding IT-security on a deeper level than most (vulnerability research, exploit development, reverse-engineering).

For the TL;DR generation: If you just want to know how to handle all the shells, search for “handling all the shells” and skip down to that. ;)

I am currently available for projects involving:

Found another one of my old exploits.

Looking through some old disks now, and found a couple of exploits I coded back in 2004.

As I mentioned on Twitter earlier (@OwariDa, @ClevCode), using the excellent Hex-Rays ARM decompiler turned out to be quite handy for verifying the payload I’m developing and injecting into the XMM6260-based baseband in my Samsung S3 (GT-i9300).

Team ClevCode was originally created when me (Joel AKA OwariDa AKA je) and my friends in HackingForSoju decided to try getting two teams into the Codegate 2012 finals in Korea.

This is my writeup for the Vuln 500 challenge in the Codegate Quals 2012 competition.

For those of you still unfamiliar with the Cicada 3301 puzzle, it has been called “the most elaborate and mysterious puzzle of the internet age” by Metro, and is listed as one of the “Top 5 eeriest, unsolved mysteries of…

The final stage of the GCHQ challenge was a small (5kB) x86 Windows/cygwin binary (available here).

After cracking stage 1 of the GCHQ challenge, we get the URL to the Javascript code available here.