{"id":30,"date":"2005-06-03T11:31:00","date_gmt":"2005-06-03T18:31:00","guid":{"rendered":"http:\/\/outflux.net\/blog\/archives\/2005\/06\/03\/defcon-prequal\/"},"modified":"2005-06-03T11:31:35","modified_gmt":"2005-06-03T18:31:35","slug":"defcon-prequal","status":"publish","type":"post","link":"https:\/\/outflux.net\/blog\/archives\/2005\/06\/03\/defcon-prequal\/","title":{"rendered":"defcon prequal"},"content":{"rendered":"<p>Man, I&#8217;m so excited!  The <a href=\"http:\/\/defcon.org\/\">DefCon<\/a> Capture the Flag contest prequalification round is starting tonight.  There goes my whole weekend!  I&#8217;m very curious how this is going to turn out.  This year I&#8217;m part of a much smaller team than the last two years, and the <a href=\"http:\/\/kenshoto.com\/\">game organizers<\/a> are new.  (Well, they&#8217;re new to organizing; they&#8217;ve been competitors in CTF before.)  The last 3 years CTF was run by the Ghetto Hackers, and the last two years had enough applicants that a prequalification round was needed.  The same thing is happening this year.<\/p>\n<p>Two years ago, I joined the <a href=\"http:\/\/outflux.net\/immunix-shark.png\">Immunix CTF team<\/a> late (who had played the <a href=\"http:\/\/www.securityappraisers.net\/immunix\/challenge.pdf\">year prior<\/a> as well), and heard details about the web-based puzzles used for the CTF prequal.  Last year, we got to do active attacks against executables on a provided machine.  After overflowing each executable, you gained the group privs to run the next executable.  Additionally, there was a text string token that you emailed to the GH to prove that you had gotten through that stage.  Each stage was progressively more difficult to exploit.<\/p>\n<p>So far this year the early <a href=\"http:\/\/kenshoto.com\/email_announce.txt\">clues<\/a> are pretty shallow.  They have mentioned &#8220;tokens&#8221; again, and a <a href=\"http:\/\/dujour.kenshoto.com\/\">contest website<\/a>.  Maybe the website will give instructions on a machine to log into.  Maybe it&#8217;ll all be web based again.  Either way, I&#8217;m stocking up on beef jerky and water.<\/p>\n<p style='text-align:left'>&copy; 2005, <a href=\"https:\/\/outflux.net\/blog\/\">Kees Cook<\/a>. This work is licensed under a <a rel=\"license\" href=\"http:\/\/creativecommons.org\/licenses\/by-sa\/4.0\/\">Creative Commons Attribution-ShareAlike 4.0 License<\/a>.<br \/><a rel=\"license\" href=\"http:\/\/creativecommons.org\/licenses\/by-sa\/4.0\/\"><img decoding=\"async\" alt=\"CC BY-SA 4.0\" style=\"border-width:0\" src=\"https:\/\/i.creativecommons.org\/l\/by-sa\/4.0\/88x31.png\" \/><\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Man, I&#8217;m so excited! The DefCon Capture the Flag contest prequalification round is starting tonight. There goes my whole weekend! I&#8217;m very curious how this is going to turn out. This year I&#8217;m part of a much smaller team than the last two years, and the game organizers are new. (Well, they&#8217;re new to organizing; [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"_links":{"self":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/posts\/30"}],"collection":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/comments?post=30"}],"version-history":[{"count":0,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/posts\/30\/revisions"}],"wp:attachment":[{"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/media?parent=30"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/categories?post=30"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outflux.net\/blog\/wp-json\/wp\/v2\/tags?post=30"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}