Now that the dust has settled, and the Vegas alsohol has left my system, time to write the post mortem from Def Con 24.
I solved the Caezar Challenge (albiet I needed a tiny hint on the last stage, as there was a lt of confusion with the hint given which was misinterpreted), and got to chew out the guy who broke my lock (all was forgiven we can 3d print new parts). I came close, but did not successfully defuse The Box. And shenanigans ensued.
Part of the Caezar challenge involved URL forcing. There were four characters, three unique, that were unsolved in the domain name. Using a combination of scripting and nslookup, it was trivial to solve (though later determined not to be necessary, but was possible after solving via traditional substitution cipher. I wont spoil the preferred method here since it was brlliant and may be used again).
Here I explain this process.
Hon1nbo here reporting from Def Con 24. I am taking a break from exploding at “The Box,” and sending this to post via raven carriers.
I got a Caezar’s Challenge badge, and whilst I don’t care to spend all of my time cracking the challegnes for the party, I want to give the person who dropped it a piece of my mind since he broke $150 worth of locks on the table in the process.
If you see someone handing out caezars badges say something. Tweet at me.
Cheers,
~H
As I write this post, sitting on a plane with my bits flowing through the ether that is tunnels and routers of the networking abyss, I ponder my previous years attending Def Con. My first year, DC 19, was fun with the tamper evident competition yet I could have done more had I a full tool set. So I brought one this year. Pelican makes neat tool chests, so I may be wandering around with it at points.
Anyone who wants to say high feel free to call if you see me. Twitter may be the fastest way to get my attention if you can’t find me.
I have to run fo the moment. The flight attendents are complaining that a purple tail is wagging into the person next to me. I have tried explaining that it must be an optical illusion, as there is no tail, but to no avail.
~H
There is now a Git repo for people to submit tips, tricks, and advice to! Why a Git repo you ask rather than a wiki? It allows people to pull in an offline copy quickly and easily.
The first revision of DEFCON for Noobs is up. Still very rough, early draft, and missing many things. However, I figured a living document is better and would do better with feedback.
-H
The convention was fairly productive and wildly entertaining for me this year for a multitude of reasons. First, I did not go to a single talk. Instead, I decided to go the video and slide route so I could focus on the villages, interacting with others (who knew socializing could be fun), and getting into trouble. I acquired various tools, talked with several interesting people, helped empty a significant amount of alcohol from the various bars, and may have had my share of wireless mayhem in the 2.4 GHz spectrum.
More details and photos to come as I lazily update everything.
Cheers,
-H