πŸš€ Submit a Challenge β€” SecDim AppSec Village CTF at DEF CON 34 and Win a ROG Xbox Ally

Reboot Boeing 787

5hBeginnerJavaC#JavaScriptPythonGoTypeScript

Boeing 787 must be rebooted every 248 days to avoid a shutdown due to a security bug. in May 2015, F.A.A urged all airlines to reboot their Boeing Dreamliner every 248 days, otherwise, the plane will lose all electrical power. Find out what happened and how you can avoid this class of security bugs in your program.

Topics

  1. Numeric Overflow

    Lesson15m

    Back in May 2015, the Federal Aviation Administration (F.A.A) told us about a serious problem: a bug that could totally turn off the power in the Boeing 787 Dreamliner, making the plane hard to control. Nobody wants that while flying, right? But guess what? This bug wasn't super complicated, even though airplanes need to be super safe.

  2. Integer Overflow

    Lab40m

    Let’s head to the lab to discover, debug, and fix this vulnerability within an actual application.

  3. Lessons learnt

    Lesson5m

    We learned from a big mistake with the Boeing 787 Dreamliner - a simple oversight caused a big problem. Numeric overflow bugs are old but still pop up in places like rocket launches and video games. These vulnerabilities occur when our program can't handle an unusual situation, letting attackers harm our program.

  4. Boeing 787 Lab

    Lab30m

    In this lab, you will learn how to find, exploit and fix a numeric overflow (integer overflow) vulnerability in a program inspired by Boeing 787 shutdown incident.