Jump Oriented Programming: Ethereum Smart Contract #2 - Real World CTF 2018

Channel:
Subscribers:
920,000
Published on ● Video Link: https://www.youtube.com/watch?v=RfL3FcnVbJg



Duration: 19:21
55,173 views
2,203


In part 2 we identify a backdoor and find the gadgets to do JOP in a ethereum smart contract.

Challenge Files + Solution: https://gist.github.com/LiveOverflow/21c8a505ca176e5bb20bc94eb23acdf1
Remix: http://remix.ethereum.org
EVM Opcodes: https://github.com/trailofbits/evm-opcodes
Ethereum plugin for Binary Ninja: https://github.com/trailofbits/ethersplay

-=[ 🔴 Stuff I use ]=-

→ Microphone:* https://geni.us/ntg3b
→ Graphics tablet:* https://geni.us/wacom-intuos
→ Camera#1 for streaming:* https://geni.us/sony-camera
→ Lens for streaming:* https://geni.us/sony-lense
→ Connect Camera#1 to PC:* https://geni.us/cam-link
→ Keyboard:* https://geni.us/mech-keyboard
→ Old Microphone:* https://geni.us/mic-at2020usb

US Store Front:* https://www.amazon.com/shop/liveoverflow

-=[ ❤️ Support ]=-

→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ 🐕 Social ]=-

→ Twitter: https://twitter.com/LiveOverflow/
→ Website: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.facebook.com/LiveOverflow/

-=[ 📄 P.S. ]=-

All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

#CTF #SmartContract




Other Videos By LiveOverflow


2019-02-01Identify Bootloader main() and find Button Press Handler - Hardware Wallet Research #5
2019-01-25Setup and Find Entry-point in ARM Firmware - Hardware Wallet Research #4
2019-01-21XS-Search abusing the Chrome XSS Auditor - filemanager 35c3ctf
2019-01-21[Live] Making-of a LiveOverflow CTF video write-up 2019 (35c3ctf)
2019-01-18Remote Debugging ARM Chip with SWD/JTAG - Hardware Wallet Research #3
2019-01-11Looking at the PCB & Chips - Hardware Wallet Research #2
2019-01-07Support LiveOverflow: Patreon & YouTube Membership
2019-01-04Threat Models - Hardware Wallet Research #1
2019-01-01Gynvael's Winter GameDev Challenge 2018/19
2018-12-28Hardware Wallet Hack: Ledger Nano S - f00dbabe
2018-12-25Jump Oriented Programming: Ethereum Smart Contract #2 - Real World CTF 2018
2018-12-21Ethereum Smart Contract Hacking - Real World CTF 2018
2018-12-14Going to Chinese Hacking Competition - Real World CTF Finals
2018-12-07OsmocomBB: Open Source GSM Implementation - Motorola Calypso Chip
2018-11-30Nintendo Switch (NVIDIA Tegra X1) - BootROM Vulnerability
2018-11-23End-to-End Encryption in the Browser Impossible? - ProtonMail
2018-11-16Identifying Good Research to actually Learn Something - Cross-site Scripting
2018-11-09Student Finds Hidden Devices in the College Library - Are they nefarious?
2018-11-02Analysing a Collection of Windows Binaries and Embedded Resources - FLARE-On 2018
2018-10-26Basic Windows Reversing and Attacking Weak Crypto - FLARE-On 2018
2018-10-19HOW FRCKN' HARD IS IT TO UNDERSTAND A URL?! - uXSS CVE-2018-6128



Tags:
Live Overflow
liveoverflow
hacking tutorial
how to hack
exploit tutorial
smart contract
smartcontract
ethereum smart contracts
solidity
compiler
backdoor
reverse engineering
eth
ether
msg.sender
msg.value
delegatecall
assembly
geth
evm
ethereum vm
virtual machine
bytecode
constructor
JOP
ROP
jump oriented programming
integer overflow
acoraida Monica
liveoverflow ctf
rwctf
real world ctf