bsides dc wctf
DESCRIPTION
Bsides Dc WctfTRANSCRIPT
![Page 1: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/1.jpg)
Security B-Sides DC 2014
How to WCTF
![Page 2: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/2.jpg)
![Page 3: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/3.jpg)
WCTF Rules▪You must register with the scoring server (instructions to follow)▪All “Game” BSSID’s are in the context of BSSIDESDCWCTF#▪Keys will only be scored once per team. ▪We log everything and obvious attempts will result in subjective penalties▪ We are much meaner than you.
▪Anything that needs to be cracked will be that challenge’s key▪ If the AP is OPEN once connected, scan for interesting ports (80) ▪ nmap –p 80 x.x.x.0/24
![Page 4: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/4.jpg)
WCTF Scoring▪ In order to score, you must email the flag to [email protected]
![Page 5: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/5.jpg)
Register Your Team
http://wctf.us/register.php
![Page 6: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/6.jpg)
WCTF Tactics▪Figure out the clues, and think hard. The clues are always obscure and never direct, but will lead you to the answer▪Make sure you have practiced with all setups in advance▪Have a process or sequential processes to get through each challenge and follow that process!▪Take really good notes, either on paper or in a text file, I promise it will help▪Learn about the person running the WCTF. This too will give a lot away.
![Page 7: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/7.jpg)
welcome to the challenges!
▪ There are 13 Flags▪ The flags have varying point values▪ Words, Context, Formatting, and Capitalization can all be
clues▪ Capture all the handshakes, you never know when you may
need them!▪ Keep track of everything▪ Multitasking will help you succeed
![Page 8: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/8.jpg)
Challenge 1▪ Hamlet says ▪ BSSIDesDCWCTF01
▪ 20 points
![Page 9: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/9.jpg)
Challenge 2▪ Whiskey Juliet Zulu▪ BSSIDesDCWCTF02
▪ 20 points
![Page 10: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/10.jpg)
Challenge 3▪ You can do this at home▪ BSSIDesDCWCTF06
▪ 25 points
![Page 11: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/11.jpg)
Challenge 4▪ Ain’t nobody home here. Move along…▪ BSSIDesDCWCTF03
▪ 30 points
![Page 12: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/12.jpg)
Challenge 5
BSSIDesDCWCTF04
▪ 35 points
![Page 13: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/13.jpg)
Challenge 6▪ Patience you must have my young padawan▪ BSSIDesDCWCTF05
▪ 50 points
![Page 14: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/14.jpg)
Challenge 7: Hide and Seek▪ ESSID: e8:94:f6:65:a1:3e▪ The Hide and Seek will be running from 1000 Saturday to
1200 Sunday ▪ The target is stationary during the contest.▪ The Hunting Grounds
▪ The Washington Marriott property▪ BSSIDesDCHideAndSeek
![Page 15: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/15.jpg)
Challenge 9 ▪ 900 & up: people still use these???
▪ 30 points
![Page 16: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/16.jpg)
Challenge 10▪ 222 & up: From Russia With Love
▪ 25 points
![Page 17: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/17.jpg)
Challenge 11▪ 6M: This doesn’t look like HD
▪ 40 points
![Page 18: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/18.jpg)
Challenge 12▪ 2M: I’ve got your number
▪ 40 points
![Page 19: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/19.jpg)
Challenge 13▪ Play me▪ Chromecast on the table
▪ 10 points
![Page 20: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/20.jpg)
Thanks to the B-Sides WCTF Team
0xAASimonj
theRedBaronmarauderDaKahuna
![Page 21: Bsides Dc Wctf](https://reader030.vdocuments.mx/reader030/viewer/2022020219/563dbb2e550346aa9aaaeae7/html5/thumbnails/21.jpg)
Questions?
@SimonJ_DC [email protected]
@0xAAginger [email protected]
@_the_RedBaron_
@maeltac [email protected]