CTFs, Meetings && Hackmiami extras

…and JZ00z built my hot bot…: )    

Awesome time in Tampa at the WCSC. We had a good crowd of players and lots of fun. Broward Hackerspace/303 came back with a VENGEANCE absolutely OWNING IT ALL!!!

It was awesome to see the winning team p0wn target by target, a team composed of  great people (Some I’ve played CTFs with..) and with a diverse and rich skills in many different areas. Only a team like that can win K&&K… and they did it.

I would like to congratulate and thank the winning team @n00bznet ,  @shitroamersays , @kingtuna , @d1sc0rd1an , Pr0xy , Alex and Raj  for winning the CTF. All I can say is this… 45 mins before ending game all they had was C&C connected to a BeEF server via firefox…. that was it… from there they went all they way up until completely owning C&C… Once again congratulations. We always learn from players.

Also many thanks to Zak and the people at WCSC that hosted us at their place at USF.

…and last but not least the %27 / MiamiP0wnMachine  team  without them this would not have been possible. Mr. @arsecroft and his music and p0wning skills, 101337 for coding and providing a brand new scoreboard and of course my good Bro Peter Guarana. Obrigado! Gracias!!  Thank you very much!!!

As for the music we had a little of Dubstep backlash!! so I focused on Minimal,Indie dance, Tech House and some break core and Com Truise….

Below some pictures of the event. Stay tuned for future dates…. Hack The Planet!

Tampa-Orlando-The space coast. Home of some of the best CTF players in the country. We cannot wait to have “La Bestia” at their mercy… We will be at the White Hatters Computer Security Club at the University of South Florida on December 17th, 2011.

This is an OPEN event ALL welcome. We will have full setup, new music, videos and of course plenty of targets to P0wn!!!.  See you there prepare for combat…

Date: Saturday December 17th, 2011.

Location: University of South Florida

MSC – Marshall Student Center, 3707 (3rd Floor)

Location Map

http://usfweb2.usf.edu/parking_services/maps/Visitor_Map.pdf

Time: 8:30 am – 5:30 pm

We had an awesome time at Hacker Halted 2011. We had some great players and pretty cool
people stopping by and checking it out.

Thanks  and congratulations to @dan_crowley and @jolly for winning the CTF and also winning at the Cyberlimpycs.

Dan was p0wning targets LEFT  and RIGHT. Awesome job!. Let’s take a look at the hardware related challenges we featured at this edition of Kommand && KonTroll CTF

In this picture we have the 3 hardware related challenges.

PrintMe Flag. The only way to win this flag was to first compromise the target VM at the ESXi then escalate privileges and finally print the flag.

At the center there is an Arduino UNO/Ethernet shield. This was pretty easy. It consisted of a HTTP parameter that had to be modified in order to turn ON /OFF the LED in a certain sequence. Most players got this one pretty fast.

Then the SheevaPlug server which could be by itself a single CTF. I used this one for Flash M0b CTF at DEFCON but back then this little wonder was running a FULLY functional C&C with two Zombies which were XP SP2s. This time it was running an install of WP that had several vulnerable plugins and the flag was the MD5 hash found at password table. Also notice that there is an USB programmable LED display attached to it. The characters displayed were also modifiable but to do it player had to gain root and compile some code which is actually available on the internet.

Most targets at Kommand && KonTroll CTF have SEVERAL attack vectors as I try to give players with different backgrounds the opportunity to win it, be it a web app or network or binary type of background. Below are some pictures of the event. If you want us to be at your event or you organize these type of competitions and want us to partner up feel free to reach out to us at [email protected] . Thanks again to EC-Council and all the people at Hacker Halted 2011 that stopped by and played.  And for the record no one has yet taken over the C&C. Stay tuned for future dates…

P.S: Most people said that the MUSIC was awesome. Well the music was basically hand picked Tech House/Minimal/Dubstep from MIA/NYC/London UNDERGROUND EDM scene which I am an avid follower of … No you won’t be hearing that music on the radio or TV anytime soon…..

We will be at Hacker Halted 2011 on October 26/27 in Miami, FL. We will be bringing the full setup PLUS we will introduce new challenges.

Hardware related challenges. No this will not be about making stuff but probing embedded OSs that will certainly drive hardware behavior once targets are compromised…. Hint.. stuff that goes ON and OFF..

We will also be featuring new multimedia tricks that we are sure you will find entertaining. Of course we will have some awesome selection of underground electronica in our open DJ/VJ station. Also playing Kommand && KonTroll CTF will warm you up for the Cyberlympics at the conference..

See you there. Prepare for combat..