---- title ---- Return of remote debugging of a micro computer ---- information ---- The server is running on GDB simulator with special patches. * Connect to the server. $ echo '$g#67+' | nc micro.pwn.seccon.jp 10000 A long connection is disconnected automatically. (several minutes) A request of a connection in a short interval is ignored. (several seconds) * Read "word.txt" on current directory. Try SOP(Step-Oriented Programming). Reference: * About SOP https://www.slideshare.net/kozossakai/possibility-of-arbitrary-code-execution-by-steporiented-programming * Assembly samples for many architectures http://kozos.jp/books/asm/cross-gcc494-v1.0.zip See the assembly samples. $ unzip cross-gcc494-v1.0.zip $ cd cross-gcc494/sample $ ls *.d See the sample programs running on GDB simulator. $ cd cross-gcc494/exec $ ls *.d * Files of the old server using SOP to solve it (at SECCON2016 final competition) - Information for the server http://kozos.jp/seccon/2016/final/gdb-server/index.html - Files of the server http://kozos.jp/seccon/2016/final/gdb-server/server.zip - Files for answer http://kozos.jp/seccon/2016/final/gdb-server/answer.zip