This year, Kenshoto hosted the 2006 DefCon Capture-the-Flag Contest, starting August 4th.

It was hard work the whole way through, but Team 1@stPlace (@tlas, apu, drb, fury, mezzendo, plato, psifertex, wrffr) managed to win it. The other teams kept us on our toes and were very strong players. Teams competing were:

• Shellphish
• Sk3wl0fR00t
• 1@stPlace
• Digital Revelation
• fednaught
• our wives are pissed
• TheEastSea
• Ad Hoc

Check back here for a possible write-up. CTF is much larger than the prequals, so it may take some time (and masochistic tendencies) to do a detailed walk-through of the entire contest.

Some fun CTF links from Fury, wrffr:

• C|Net - OMGPONIES, nopsr.us is getting a lot of traffic now.
• AP - who is the "unmentionable" team name? "Our wives are pissed"? That's silly.
• AP mirror - even our team name pwns j00! (note the "mailto" tags generated due to the "@")
• ZDNet - we look like we're getting booked
• Fri Scoreboard - scoreboard while waiting for DefCon to officially start
• Sat Scoreboard, and another - evidence of us being the first to Pwn
• Sat Hacking - wrffr and drb from behind
• Sat Scoreboard - steals like crazy
• Sat Graphs - after attempting to adjust the game for the broken key submission system. And to think we tried to talk them out of it! :)

1. Keep services up at all times. Who cares if someone is stealing your keys?! Service Level is a direct multiplier of all other points.
2. Automate attacks. Spend your time developing new attacks, not running old ones.
3. Automate key management. Spend your time stealing new keys, not shuffling old keys.

• Mr. Kenshoto has a great crew. They rocked.
• Having to submit keys over DTMF is just plain mean. Cool... but very mean.
• Solaris is ... limited. (Though x86 was better than if we had been forced to work with Sparc.)