# An Exercise in Weak Random Seed Exploitation

**URL:** https://forum.tjll.net/t/an-exercise-in-weak-random-seed-exploitation/7
**Category:** uncategorized
**Created:** [April 7, 2014, 1:55am UTC](https://forum.tjll.net/t/an-exercise-in-weak-random-seed-exploitation/7 "2014-04-07T01:55:38Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![tyler](https://forum.tjll.net/letter_avatar_proxy/v4/letter/t/35a633/32.png) [@tyler](https://forum.tjll.net/u/tyler)
#### Post date: [April 7, 2014, 1:55am UTC](https://forum.tjll.net/t/an-exercise-in-weak-random-seed-exploitation/7/1 "2014-04-07T01:55:38Z")

</div>

Last weekend I participated in a capture-the-flag event sponsored by [Bishop Fox](http://www.bishopfox.com/) and ran by students at BYU. Following the event I decided that it may be fun to try and crack the scoring software itself – so I’ve written up the process here to explain how I put the exploit together.

* * *
This is a companion discussion topic for the original entry at [http://blog.tjll.net/weak-random-seed-rack-exploit/](http://blog.tjll.net/weak-random-seed-rack-exploit/)

---

<div class="post-metadata">

### Author: ![tylerjl](https://forum.tjll.net/user_avatar/forum.tjll.net/tylerjl/32/21_2.png) [@tylerjl](https://forum.tjll.net/u/tylerjl)
#### Post date: [April 21, 2014, 2:19am UTC](https://forum.tjll.net/t/an-exercise-in-weak-random-seed-exploitation/7/2 "2014-04-21T02:19:16Z")

</div>

For anyone interested in seeing the complete proof-of-concept, I’ve uploaded a working exploit to a [gist](https://gist.github.com/tylerjl/11130539).