Everyone at Legitimate Business Syndicate is heartbroken over the passing of our teammate and friend Selir. Selir was one of the most dedicated members of our group. Whether it was lengthy work sessions or late nights babysitting servers in a surprisingly cold CTF room, Selir was always committed to making sure things worked well. His frightening competence was also beyond valuable. All of the…
Hello! I had a lot of fun at my first DEF CON in several years with free time and no responsibilities. Turns out running a CTF is hard work, and while it's also a wonderful experience, I'm also happy that our friends at Order of the Overflow get that experience now :) I've enjoyed many of the visual art on display at DEF CON and other events around the world for over a decade now. In particular,…
This is part 4 of a series of posts about Building DEF CON Capture the Flag . Finals is the hardest part of CTF to run. A lot of it is timeboxed (we generally didn’t have access to the CTF room until Wednesday or Thursday), it’s a pain to get stuff in and out of the conference area, and there’s a definite feeling of do-or-die. Why? It’s where your reputation among the CTF community comes from,…
This is part 3 of a series of posts about Building DEF CON Capture the Flag . Quals, to me, is the most important part of DEF CON CTF: it’s the only game we make that most teams will have any interaction with, and for the teams that do qualify, it’s the best way to prepare them and give them an idea about what the finals are going to be like. We come to a consensus about dates in December, and try…
This is part 2 of a series of posts about Building DEF CON Capture the Flag . Basic Hype Game Many parties want to see you succeed running DEF CON CTF: the DEF CON organization, past organizers, past competitors, and everyone in the CTF community. We all have a vested interest in seeing DEF CON CTF as a popular game with lots of players, which means you need to bring your hype game. I consider our…
With the closing of DEF CON 25 and our last year of running Capture The Flag, I figured a post about what it took to create cLEMENCy was in order. This is a very long write-up detailing what I went through while developing cLEMENCy and ignores all the effort that occurred on top of it to create other challenges for DEF CON CTF 24 and 25. Hopefully this post shows the amount of dedication it can…
It’s been a great honor and pleasure to be part of Legitimate Business Syndicate while hosting DEF CON Capture the Flag for the last five years. Now that DEF CON has announced the selection process for the next DEF CON CTF organizers , it’s time for the next organizers to step up to the plate, take the reins, and mix their metaphors on the way to becoming the new DEF CON Capture the Flag…
We'd like to again congratulate every team that played our final finals at DEF CON 25 this past weekend. We're very happy every team was able to score and patch services on our brand new cLEMENCy architecture . It was a lot to ask of our competitors, and we couldn't be more thrilled with their collective performance this weekend. place team id score 1 PPP 1 33850 2 HITCON 5 30631 3 A*0*E 10 19730…
Good morning, and welcome to DEF CON 25. We are pleased to announce the general availability of the cLEMENCy architecture developed by Lightning for DEF CON CTF. This release includes architecture documentation and an emulator with built in disassembler and debugger. emulator with built-in debugger and disassembler , compiled for Ubuntu 14.04 LTS x64_64. emulator signature documentation…
Here are the files for each DEF CON CTF 2017 Qualifiers challenge. Challenge text is for reference only, the challenge servers are no longer available. Baby's First beatmeonthedl I really like to be beaten but keep it on the dl. Connect to: beatmeonthedl_498e7cad3320af23962c78c7ebe47e16.quals.shallweplayaga.me 6969…
We are pleased and honored to announce the results of DEF CON CTF 2016. Team Final Score PPP 113555 b1o0p 98891 DEFKOR 97468 HITCON 93539 KaisHack GoN 91331 LC↯BC 84412 Eat Sleep Pwn Repeat 80859 binja 80812 pasten 78518 Shellphish 78044 9447 77722 Dragon Sector 75320 !SpamAndHex 73993 侍 73368 Mayhem 72047 Congratulations to our top three teams PPP , b1o0p , and DEFKOR . We would also like to…
In 2016, DEF CON CTF will use the same game format as the DARPA Cyber Grand Challenge (CGC) . It will not be the same attack-defense format it has been in previous years. The challenges will all be DECREE x86 binaries, instead of a wide sampling of challenge formats. Grab a beverage and some index cards, it's complicated. What is the Cyber Grand Challenge game format? The CGC game format is…
Greetings, DEF CON 2016 CTF Qualifiers are officially over. Thanks to everybody who came by our IRC this weekend and played in our game. HUGE props to PPP, who solved every challenge available with just under 6 hours left in the game. Source code to all of our challenges from this year is already up and posted on our github . In addition to source code, the challenges, as they ran, are all…
Hey, we're running online qualifiers for DEF CON CTF at midnight UTC (five hours from now), and you should play them. Really Obvious Foreshadowing Quals this year have a lot of references to DARPA Cyber Grand Challenge technologies. If you have no idea what that is, read our CGC for Hackers series of posts. If you do have an idea of what that is but are fuzzy on some of the details, read those…
DARPA’s Cyber Grand Challenge uses a new computing environment, the DARPA Experimental Cyber Research Evaluation Environment, or DECREE. While DECREE is designed to be less useful for general-purpose computing, it has some properties that make it excellent for binary reverse engineering, patching, and exploitation contests. DECREE is built on i386 Linux, and ships with the clang compiler and…
The DEF CON CTF 2016 qualifying contests are going very well. Here's where we are: Contest Dates Notes DEF CON CTF 2015 May 16 - Aug. 9 2015 Qualified DEFKOR HITCON CTF Oct. 17 - Dec. 6 2015 Qualified blue-lotus RuCTFE Nov. 21, 2015 Qualified StratumAuhuur SECCON CTF Dec. 5 2015 - Jan. 31 2016 First place team already qualified 32C3 CTF Dec. 27 - 29 2015 Qualified pasten Boston Key Party Mar. 4 -…
DARPA’s Cyber Grand Challenge is “a competition that seeks to create automatic defensive systems capable of reasoning about flaws, formulating patches and deploying them on a network in real time.” More laconically, it’s Capture The Flag for autonomous computers. Just like DEF CON Capture The Flag (CTF), Cyber Grand Challenge (CGC) is a contest with two separate events. The CGC Qualifying Event…
Capture the Flag is a family of competitive games involving opposing teams trying to steal something of value from each other. In computer security, the flag is typically a piece of secret data, and the territory from which it is captured is a computer system controlled by the opponent. There are two popular formats for computer security Capture the Flag (CTF) games: Jeopardy-style and…
It's your favorite time of year again: the day registration for DEF CON Capture the Flag Qualifiers opens! Grab your friends, the hilarious joke team name you thought of fifteen minutes before last year's game ended, and your favorite password manager, and bring them down to the quals site. Visit https://2016.legitbs.net/ to register for DEF CON CTF Qualifiers.
We are pleased to announce the qualifying events for DEF CON CTF 2016! We've spent a great deal of time reviewing a record number of proposals, and had to make some very difficult choices. We'd like to thank everyone in the CTF community who took the time to send us proposals: even if we weren't able to accept your proposal, your contest is important to us and the larger CTF community. Without…
There are several ways to qualify for DEF CON Capture the Flag 2016: win DEF CON CTF 2015 (congratulations DEFKOR!), qualify through DEF CON CTF 2016 Qualifiers (more news on this in 2016), or win a "qualifying competition." If you run a Capture the Flag or other computer security competition and want to have your winners move on to DEF CON finals, you can become a DEF CON CTF 2016 Qualifying…
We're releasing several pieces of scoring data today, ready to download and analyze as you see fit. Finals Visualizer We've replayed all the redemption events from DEF CON CTF 2015 Finals into this YouTube video for your viewing pleasure. Qualifiers Data Dump Much like our 2014 data dump , this release includes JSON dumps of categories, challenges, notices, teams, and limited user information, and…
We are pleased to announce the 2015 DEF CON Capture the Flag final scores. Team Name Final Score DEFKOR 23949 Plaid Parliament of Pwning 19896 0daysober 17943 HITCON 13560 blue-lotus 12442 0ops 11306 Dragon Sector 11288 Samurai 10742 Shellphish 10591 LC↯BC 9941 !SpamAndHex 9461 Gallopsled 8608 9447 8410 CORNDUMP 7508 Bushwhackers 7447 How Scoring Worked Before game start, we had a set of regular…
Greetings, Congratulations to the following teams, who have qualified and accepted spots in the DEF CON 23 Capture The Flag. Team Number Team Qualifying Event 1 Plaid Parliament of Pwning DEF CON CTF 2014 Finals 2 Bushwhackers RuCTFE 3 Samurai Ghost in the Shellcode 4 HITCON Boston Key Party 5 DEFKOR DEF CON CTF Qualifiers 6 9447 DEF CON CTF Qualifiers 7 Gallopsled DEF CON CTF Qualifiers 8…
"I want to download and audit the Scorebot from DEF CON 22 CTF just like I did for DEF CON 21 CTF finals ." Torrent file Signature Entity-relationship diagram Installation Have PostgreSQL 9.3 or newer installed. 9.2 may work but has not been tested. OPTIONAL: verify that you downloaded an official dump. More instructions below. Create a database named scorebot-2014 . From the command line:…