Git Product home page Git Product logo

samuzora

✨ Neovim for life ✨


Konnichiwassup! I'm mostly into CTFs and Python development, currently learning Go and ReactJS. In my free time, I attempt to work on my many unfinished projects (but end up over-configuring my init.vim instead).

🚩 CTFs 🚩

If I'm not busy mugging for my studies, you can usually find me playing in CTFs over the weekend.

I main web and pwn, and the occasional low-hanging crypto challenge. Also have some decent experience with Pyjails!

Notable wins

2021

  • YCEP - 3rd place
  • MetaRed CTF - 1st place
  • idekCTF - 3rd place in academic category

2022

  • VU Cyberthon - 9th place
  • CTF.SG - 6th place
  • Sieberrsec - 3rd place
  • Whitehacks - 3rd place
  • Imperial CTF - 13th place
  • Winja CTF - 3rd place
  • YCEP - 1st place
  • Codegate 2022 Finals - 4th place
  • STACK the Flags 2022 (JC Category) - 3rd place

2023

  • Sieberrsec 2023 (Secondary Category) - 1st place

📋 Projects 📋

CTF-cord is a Discord bot that aims to meet all your CTF needs (excluding solving the challs for you)

CTF-cord's backbone is CTFtime. To be honest, I really started off just wanting to scrap CTF data from CTFtime and display it in an embed.

Embed

Currently, it has many more features, including:

  • CTF channel and scheduled event management
  • Automated reminders
  • Weekly CTFtime upcoming-CTFs updates
  • Point distribution calculation + member percentage contribution

Here's the invite, feel free to add it to your server :) The bot will be hosted indefinitely, but if it happens to be down someday, you can always clone the repo and host it on your own VPS.

Still undergoing development, feel free to suggest new features ✨ or report any bugs 🪳


ffuzzer is a CLI format-string fuzzer for CTF Pwn challenges. Its use case is pretty niche, specifically full RELRO format string challs with buffer overflow.

However, it does find your offset as well, which can be applied to general format string writes (nothing that Pwntools can't already do).

Ultimately, this tool aims to make format string exploitation as easy as can be, with the help of Pwntools.

It can fuzz:

  1. Offset of input on stack
  2. Canary offset (pretty accurate!)
  3. PIE base (pretty accurate!)
  4. Custom strings

The main selling point of this tool is basically the no-scripting-required fuzzing.

In this tool, usage is very intuitive: Make your way to the format string vuln in an interactive repl and copy-paste the provided payload. That's it.

Once the program detects the format-string leak, it will automatically start fuzzing.

ffuzzer in action!

Check out the link in the header for more details!


ctf-platform

samuzora's Projects

ffuzzer icon ffuzzer

Fuzzer for format string vulnerabilities

pet.nvim icon pet.nvim

Cute Neovim plugin to display a cat at the right of the cursorline

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.