1
2
3
4
5
6
7
silex@silex:~/work/ssti/ssticchallenge mips-readelf -l ssticryptreadelf: Error: Unable to read in 0x28 bytes of section headers
readelf: Error: Unable to read in 0x618 bytes of section headers
 
Elf file type is EXEC (Executable file)
Entry point 0x400c40
There are 8 program headers, starting at offset 52
readelf: Error: Unable to read in 0x100 bytes of program headers

1
2
3
4
5
6
7
8
9
silex@silex:~/work/ssti/ssticchallenge mips-readelf -a ssticrypt
readelf: Error: Unable to read in 0x28 bytes of section headers
ELF Header:
  Magic:   7f 45 4c 46 01 02 01 00 00 00 00 00 00 00 00 00 
  Class:                             ELF32
  Data:                              2's complement, big endian
  Version:                           1 (current)
  OS/ABI:                            UNIX - System V
  ABI Version:                       0
 ...

1
2
3
4
5
6
7
8
9
        00000000:    7f454c46   const   0x7f454c46              
        00000004:    01020100   const   0x01020100              
        00000008:    00000000   nop                             
        0000000c:    00000000   nop                             
        00000010:    00020008   const   0x00020008              
        00000014:    00000001   const   0x00000001              
        00000018:    00400c40   const   0x00400c40              
        0000001c:    00000034   teq     $0,$0,0x000             
        00000020:    0004a820   add     $21,$0,$4               
 ...

1
2
3
4
5
6
7
8
9
Problem 1: Tied Down [Brian Dean, 2012]
 
As we all know, Bessie the cow likes nothing more than causing mischief on
the farm.  To keep her from causing too much trouble, Farmer John decides
to tie Bessie down to a fence with a long rope.  When viewed from above,
the fence consists of N posts (1 <= N <= 10) that are arranged along
vertical line, with Bessie's position (bx, by) located to the right of this
vertical line.  The rope FJ uses to tie down Bessie is described by a
sequence of M line segments (3 <= M <= 10,000), where the first segment
 ...

1
2
3
4
5
6
7
8
9
Problem 3: Balanced Cow Subsets [Neal Wu, 2012]
 
Farmer John's owns N cows (2 <= N <= 20), where cow i produces M(i) units
of milk each day (1 <= M(i) <= 100,000,000).  FJ wants to streamline the
process of milking his cows every day, so he installs a brand new milking
machine in his barn.  Unfortunately, the machine turns out to be far too
sensitive: it only works properly if the cows on the left side of the barn
have the exact same total milk output as the cows on the right side of the
barn!  
 ...

1
2
3
4
5
6
7
8
9
Problem 2: Bookshelf [Neal Wu / Traditional, 2012]
 
When Farmer John isn't milking cows, stacking haybales, lining up his cows,
or building fences, he enjoys sitting down with a good book.  Over the
years, he has collected N books (1 <= N <= 100,000), and he wants to build
a new set of bookshelves to hold them all.  
 
Each book i has a width W(i) and height H(i).  The books need to be added
to a set of shelves in order; for example, the first shelf should contain
 ...

1
2
3
4
5
6
7
8
9
*****************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************
*     *     *             *                           *   *       *                 *     *       *     *           *         *         *   *       *                       *             *   *                       *       *       *         *   *   *       *   *         *         *                 *             * *             *     *       *   *     *         *         *   *           *           *
* ***** *** * ******* *** ******* ********* ********* * * * ***** * ***** *** ***** * * *** *** *** * *** *** ***** * ***** *** * ******* * * *** * * ********************* * ******* *** * * * * ***************** *** * *** * ***** * ********* * * * * *** * *** * *** *** *** * *** * ***** *********** ********* * * * * ********* *** *** * ***** * * * * * *** ***** ******* * *** ***** *** *** * *******
*       * * *       *   *       * *       * *       * * *   *   *   *   *   *   *   * *     * *     *       * * *   *   *   *   *     *   *   * * * *   *       *   *   *   * *     *   *   *   * *             *   *   * *     *   *   *         *   * *   * *     * * * * *   * *   * *   *   *     *     *     *   * * * * *   *   *   *     *     * *   * *   *   *     *   *   *       *   * *   * *   *   *
* ******* * *** ******* ******* * * ***** *** ***** * *** *** ******* * *** *** * *** ******* *************** * * *** *** *** ******* * ******* * ***** * ***** * * * * * *** * *** *** ********* * *********** ***** *** ******* * *** * ************* *** * ******* * * * *** * *** * ***** * * *** * ***** * *** *** * * * * * * * *** ********* * * ***** ***** *** ******* * *********** *** *** ***** * * *
*     *   *     *     *     * * * *     *     *     *   *   *   *     * *     * *   *     * *     *     * *   *   *   *   *   *   *   *   *     *     * *   *   * *   *   *   *   *   *   *     * *     * *   *   *   * * *       * *   *   *         *     *   *       * * *   * *   *     * * * * *       * *   * *   * * *   * * *   *     *   * *   * *   *     *   *       *   *     *   * *     *   *   * *
***** *** ******* *** ***** * * * ***** ******* ******* *** *** * ***** ***** * *** ***** * * *** *** * * * ***** ***** *** ***** * ***** * *** ***** * *** * * * ******* * ***** * * *** * *** * ***** * * * *** * *** * * ******* * ***** * ******* ********* * ******* * * ***** ******* * *** * ******* *** * * * *** * ***** *** * ***** * * ***** * * *** ***** *** * ******* * *** * *** * ***** * ***** *
*   *   * *       * *       *   * *     *     *       *   *   * * *   *   *   * *   *   * *     *     *   *     *       *   *     *       *   *   *   *   * * * *   *   * *   *   * *     * *   * *     *   * *   *     * *     *   * *     * *               *       *   * * *     * *       *   * *     *   * * * * *         *   * *     *   *     *   * *       * *   *   *   * * *   *   *   * *   *       *
* ***** * * ******* ********* *** * ******* ********* *** *** * * * ***** ***** * *** *** ***** ********* ***** ******* * *** *************** ***** ***** *** ***** * * ***** * ***** ***** * *** * ***** *** * ***** *** ***** * ***** ***** * ******************* *** *** * *** *** * ******* *** * *** *** *** * * ************* *** * ***** ***** * *** * ******* ******* * * * * * ***** *** * * * *********
 ...

1
2
3
4
5
6
7
8
input:
++++++++++[>+++++++>++++++++++>+++>+<<<<-]>++.>+.+++++++..+++.>++.<<+++++++++++++++.>.+++.------.--------.>+.>.
 
output:
:main
        SET PUSH, X
        SUB SP, 30000
        SET X, SP
 ...

1
2
3
4
5
6
7
8
9
        .equ    INPUT_VALUE,    5
        @ Embest board specific software interrupts
        .equ    SWI_PrInt,      0x6b
        .equ    Stdout,         0x01
        .equ    SWI_Exit,       0x11
 
        .text
factorial:
        @ Push stack
 ...

1
2
3
4
5
6
7
8
9
#define Z IP
#define I FP
#define J LR
 
#define INPUT_VALUE 30
 
; in C
; int factorial(int n) {
;       if (n <= 1) {
 ...

1
2
3
4
5
6
7
8
9
#define FP I
#define LR J
        
@ Reduces value at A by 1 and returns new value
:fn
        SUB [A], -1
        SET A, [A]
        SET PC, LR
        
 ...

1
2
3
4
5
6
7
8
9
#define int word
        
@ Reduces value at A by 1 and returns new value
word fn(word pointer A)
        *A = *A - 1
        return *A
 
@ Entry point of the program
task main()
 ...

1
2
3
4
5
6
7
8
9
 
@ Reduces value at A by 1 and returns new value
word fn(word pointer A)
        *A = *A - 1
        return *A
 
@ Entry point of the program
task main()
        @ Declare a 16 bit integer of value 4
 ...

1
print ("Hola")

1
print ("Hola")

1
2
3
4
5
6
7
8
9
10:17:49: プロジェクト ruviedit のビルドステップを実行中...
10:17:49: 起動中: "C:\QtSDK\QtCreator\bin\jom.exe" clean
        C:\QtSDK\QtCreator\bin\jom.exe -nologo -j 4 -f Makefile.Debug clean
        del GeneratedFiles\debug\moc_mainwindow.cpp GeneratedFiles\debug\moc_ReplaceDlg.cpp GeneratedFiles\debug\moc_NamedColorDlg.cpp GeneratedFiles\debug\moc_CompletionWidget.cpp GeneratedFiles\debug\moc_ErrorOutput.cpp GeneratedFiles\debug\moc_SettingsDlg.cpp GeneratedFiles\debug\moc_RubySyntaxHighliter.cpp GeneratedFiles\debug\moc_RubyProcess.cpp GeneratedFiles\debug\moc_EditView.cpp
        del GeneratedFiles\qrc_mainwindow.cpp
        del GeneratedFiles\ui_mainwindow.h
        del debug\charEncoding.obj debug\CompletionWidget.obj debug\EditView.obj debug\ErrorOutput.obj debug\main.obj debug\mainwindow.obj debug\NamedColorDlg.obj debug\ReplaceDlg.obj debug\RubyProcess.obj debug\RubySyntaxHighliter.obj debug\Settings.obj debug\SettingsDlg.obj debug\moc_mainwindow.obj debug\moc_ReplaceDlg.obj debug\moc_NamedColorDlg.obj debug\moc_CompletionWidget.obj debug\moc_ErrorOutput.obj debug\moc_SettingsDlg.obj debug\moc_RubySyntaxHighliter.obj debug\moc_RubyProcess.obj debug\moc_EditView.obj debug\qrc_mainwindow.obj
        del debug\ruviedit.intermediate.manifest ..\ruviedit.exp ..\ruviedit.ilk vc*.pdb vc*.idb
        C:\QtSDK\QtCreator\bin\jom.exe -nologo -j 4 -f Makefile.Release clean
 ...

1
Charlie bit me!

1
print %"racecar" || "racecar"% tnirp

1
2
3
4
5
6
7
8
9
/*1298995513,169775559*/
 
if (window.CavalryLogger) {
    CavalryLogger.start_js(["dfIHW"]);
}
 
function ProfileChooser() {
    this.parent.construct(this);
    this.checkedItems = {};
 ...

1
2
3
4
5
6
7
8
9
/*1298995513,169775559*/
 
if (window.CavalryLogger) {
    CavalryLogger.start_js(["dfIHW"]);
}
 
function ProfileChooser() {
    this.parent.construct(this);
    this.checkedItems = {};
 ...

1
2
3
4
5
<?
$i=1;
$i=$i+;
echo($i)
?>

1
2
3
4
5
<?
$i=1;
$i=$i+2;
echo($i)
?>

1
2
3
4
5
<?
$i=1;
$i=$i+2;
echo($i);
?>

1
2
3
4
5
6
7
8
9
Ahang Inna
==========
by: djmlog103
Indrachaapa Liyanage
http://www.youtube.com/watch?v=Ux8E4crycI4
(/) Slide Up  (\) Slide Down  (h) Hammer On  (p) Pull Off  (b) Bend (r) Release (v) Vibrato
 
Intro
=====
 ...

1
Charlie bit me!

1
2
3
4
5
6
7
8
9
Unhandled exception: page fault on read access to 0xffffffff in 32-bit code (0x37001376).
Register dump:
 CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b
 EIP:37001376 ESP:0033b2c8 EBP:0033b2e0 EFLAGS:00010286(  R- --  I S - -P- )
 EAX:ffffffff EBX:7ebd9590 ECX:03d243b4 EDX:00000000
 ESI:ff880000 EDI:0000020a
Stack dump:
0x0033b2c8:  0033b394 7ebd9590 0033b340 7eb6584e
0x0033b2d8:  0000000c 00000000 0033b310 7eba1bea
 ...

1
er

1
quaak quaak quak quak quak quak quaak quaak quak quak quak quaak quak quak quak quak quaak quak

1
0baac7fd32273cfefd9b6e10e46d52bc16f9a9a70fb3898ac1bb54430eace490b73ce43748daa7130546b62ba9e5559a110ec28fcf4445f98c7d07269122b934

1
2
3
4
5
6
7
8
9
1)
stack --> [1] --> NULL
 
2)
stack --> [1] --> NULL
  tmp --> [2]
 
3)
stack --> [1] --> NULL
 ...