SAT, SMT, and CTF, oh my!

Presented at ToorCon San Diego 18 (2016), Oct. 15, 2016, 3 p.m. (50 minutes).

This talk will give an introduction to SAT solvers, SMT solvers, and their applicability to security CTF challenges. Real challenges from recent CTFs will be used to show how these tools can sometimes be used to find flags automagically. Finally, cutting-edge applications of SAT/SMT solvers such as shellcode and ROP chain generation and concolic execution will be touched upon.

Presenters:

• Tom Samstag / tecknicaltom   as Tom Samstag
  Tom Samstag (tecknicaltom) is a Principal Security Engineer at Security Innovation in Seattle and member of the Neg9 CTF team. A Perl hacker and C programmer at heart, his interests tend to gravitate towards reverse engineering, exploitation, static analysis, and other bit-fu aspects of software and security.

Tags:

• CTF

Similar Presentations:

• ToorCon San Diego 18 (2016) / Math is you friend
• Kiwicon 4: The four e:Sheep-persons of the Cyber Infopocalypse (2010) / Code Analysis Carpentry (or, how to avoid braining yourself when handed a SMT solving hammer)