EkoParty Reverse & Go challenge

[Nicolas Waisman <nicolas () immunitysec com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The EkoParty Reverse && GO challenge
####################################

Porque?
#######

Don't have a ticket to EkoParty (EkoParty.org) yet? Don't Worry! The
EkoParty organizers and Immunity, Inc. (immunityinc.com) would like
to invite you to take part in the "Reverse && GO" challenge. The first
five people to complete the challenge will obtain official tickets
for EkoParty 2009, which takes place September 17-18, in beautiful
Buenos Aires, Argentina.

Como?
#####

The Reverse & GO challenge consists of two significant parts:

  * Reversing: Immunity will give you a binary, that will contain
  at least one bug. Your job is to find the bugs, and crash the
  software to then determine its security impact.

  * Reporting: Write a simple advisory, include an introduction, how
  you found the bug, detailed information about the vulnerability,
  attack scopes, a proof of concept exploit (including source code)
  and a recommended solution to the problem.

Donde?
######

The target binary is a simple win32 executable (with full symbols) that
parses XML files. Run it without arguments and it will read a file called
"immunity.xml" from the current working directory.

You can download the binary here:
http://www.immunityinc.com/downloads/immunity.zip

Criterios
#########

  * Number of bugs found (there might be more than one!)
  * Bug originality
  * Understanding of the vulnerability
  * Clarity of advisory

Plazo
#####

The challenge deadline is the 1st of September. The winners will be
announced the 7th of September on EkoParty.org. Send your results to
argentina () immunityinc com.



For any questions and comments regarding EkoParty, please visit
EkoParty.org, for any questions and comments regarding the Reverse && GO
challenge please contact argentina () immunityinc com

Happy hunting!

for more information: http://immunityinc.com/contest-en.shtml
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkqEfVwACgkQnx8KWzmcRsGQ/QCfTD4dwrpCsdh/8b57VKTcG4mY
fMEAn0yqtgQKXh5A12zeqaNtCxEq2NxS
=mMxO
-----END PGP SIGNATURE-----
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave