[13 Apr 2014 | No Comment | ]
The blog’s heart’s beating is normal now

So yeah the ZOMGWTFAPOCALYPTIC bug affected this blog too.

I had a very busy couple of weeks and traveled to Cairo to attend OWASP cairo chapter launch meeting. so i had no time or brains to fix it that time but i disabled SSL.
Today i updated the openssl and libssl to the latest version in the repo and BAZINGA! i am no longer affected.

Reissued the (self-signed) certificates and put the VirtualHost back to apache’s config and restarted. and no more leaking (I hope)

Read the full story »

Miscellaneous »

[1 Dec 2014 | No Comment | ]

Challenge name: 7amamaBook v2
Source code: https://github.com/0xAli/CTF-Challenges/tree/master/7amamabook%20v2


Vulnerability: Known Weak PRNG in PHP.
If you know elements like (IP/PID/Seconds/Millisec/PID) you can calculate the session ID.
Challenge solution:
First use bruteforce to find the “logs” directory (dirbuster should find it quick).
Open sessions.txt
Find the IP, seconds, millisec and partial session id (Used to verify the programatic bruteforce result).
Write a bruteforce script to guess the apache proccess ID.
Then using Cookie manager+ or any other tool to set the PHPSESSID cookie to the session id you got.
Then browse to the index (Or click 7amamberg in FAQ) to see …

Miscellaneous, Tutorials »

[6 Nov 2014 | No Comment | ]
[Solution] Steam linux client fails to Verify Integrity of Game Cache

Hello Internet!
If I ever try the “Verify Integrity of Game Cache” option of steam to check my local games for corruption it doesn’t see my files and re-downloads the game, and my connection speed is slow
I am using Linux Mint, and this affect Ubuntu as well.
Turns out it’s a known issue https://github.com/ValveSoftware/steam-for-linux/issues/2515
It’s because your distro is encrypting /home and thus steam can’t recognize the files for some reason..
The Solution:
Create a new library directory
Settings -> Download -> Steam library folders
Then create a new folder

And to keep your old games, copy …

Miscellaneous »

[12 Aug 2014 | No Comment | ]

I was cross compiling a program that required libcurl, so i had to cross compile curl first then compile the other program and pointing it towards that libcurl.
“./configure” was normal, but it failed “make” there was an error while linking
Here is a snippet from config.log

configure:5856: checking whether libcurl is usable
configure:5890: i686-w64-mingw32-gcc -std=gnu99 -o file.exe -g -O2 file.c -L/usr/lib/x86_64-linux-gnu -lcurl >&5
/tmp/ccPPDrjc.o: In function `main':
/root/program/file.c:17: undefined reference to `_imp__curl_easy_setopt’
collect2: error: ld returned 1 exit status

The solution is simple adding mingw bin directory to the $PATH of operating system.
In …

Coding »

[24 May 2014 | No Comment | ]

As you may know i am relatively new to Ruby on rails and i am currently working on a project where i need a simple captcha.
And simple_captcha is pretty simple and exactly what i need, however i came upon a weird bug.
In the signin_controller i use simple_captcha_valid? and sometimes it works properly and sometimes not, and i hate inconsistent bugs it was almost showing randomly.
After more than an hour of debugging i realized the problem was in simple_captcha_valid? it’s self-destructing after the first use, converting from true to false
So if …

Miscellaneous »

[9 May 2014 | 2 Comments | ]

I was installing a windows 7 iso via USB normally as i have done tens of times.
Using Rufus the windows ISO contents are now properly on the USB drive and ready to install.
Then rebooted and pressed F12 (Might be different in your case) to open the boot menu and chose to boot from the USB.
Then i got this weird error:
“No device drivers were found. Make sure that the installation media contains the correct drivers”
“A required CD/DVD drive device driver is missing. If you have a driver floppy disk, CD, …