RT @pfs_ctf: 1ST PLACE! Thanks so much to all the organizers, other finalists, and everyone who followed along and supported us. A special…

@XiaoWei___ Hmm, I did not actually double check that. It may be some device either added due to my host or maybe due to auto-config for Ubuntu 18.04 guest. Sorry about that. Luckily, other devices would also work if you can hit the bulk transfer code

Pwning VMWare, Part 1: RWCTF 2018 Station-Escape

@NieDzejkob Makes sense, thanks!

@NieDzejkob Which memfd are you racing here? Doesn’t the supervisor close its fds to your ELF, and the sandbox pid itself is CLOEXEC? Or is the sandbox memfd leaked or accessible in the container otherwise

@NieDzejkob What was the final bug/escape? Can't find any other info online about the chal after spending some time on it

There and Back Again: HITCON 2018's Super Hexagon

My 2018 browser pwnable advent calendar writeup