Author: John Simpson

April 6, 2018 News

https://www.itworldcanada.com/article/canadian-mandatory-breach-notification-starts-november-1-no-regulations-yet/403558
https://krebsonsecurity.com/2018/04/secret-service-warns-of-chip-card-scheme/
https://www.theregister.co.uk/2018/04/05/billions_files_exposed_aws_ftp_wide_open/
https://www.theregister.co.uk/2018/03/30/us_government_travelers_social_media/
https://www.theregister.co.uk/2018/03/28/iot_software_still_insecure/
https://www.theregister.co.uk/2018/03/27/baltimore_911_problems_blamed_on_hacking_attack/
https://www.theregister.co.uk/2018/03/27/exploit_kit_decline/
https://krebsonsecurity.com/2018/04/panerabread-com-leaks-millions-of-customer-records/
https://www.forbes.com/sites/thomasbrewster/2018/03/22/yes-cops-are-now-opening-iphones-with-dead-peoples-fingerprints/#14dda8a2393e
https://www.wired.com/story/monero-privacy/
https://www.lightbluetouchpaper.org/2018/03/26/tracing-stolen-bitcoin/
https://arstechnica.com/gadgets/2018/04/google-bans-cryptomining-chrome-extensions-because-they-refuse-to-play-by-the-rules/
https://www.schneier.com/blog/archives/2018/03/facebook_and_ca.html
https://www.theregister.co.uk/2018/03/29/facebook_to_extend_bug_bounty_to_cover_data_leakage_from_apps/

Getting Started with CTF

With the Sheridan CTF 2018 coming up soon we here on the CTF Executive Committee would like to show off what we are working on with a quick demonstration of the platform that will be used for the event.

Here is the login page. Before the event, you will receive the website for the CTF by email. At that point in time, the CTF will still be closed as the event is not until April 7th. On the event day pre-game meeting, you and your team will be given your team’s credentials which is used to represent your team at the CTF. Do not share these credentials with other teams.

When your team is ready, you can begin by clicking the login button on the top right of the page to access the login page:

This is the login page *oooo*. Pretty straightforward. Enter your credentials to enter the gameboard screen.

Gameboard

On the top left you have your leaderboard and announcements. The leaderboard will show the list of all teams so you can sulk in the fact that other teams are going faster than you.

<

On the announcements page you will see any important announcements that the moderation team might announce. You will receive a notification everytime something important has to be announced. We announce that we promise not to spam this. Promise.

FLAG-EAEE5F895560548C9E02

On the right side you can see the list of all teams without their score so you can sulk in the fact they have a fancier team than yours.

Below that is the filters which lets you and your team organize the gameboard based on the categories for the CTF as well as whether you completed the challenge or not.

 Challenges

Now, let’s go over how to do a challenge:

On the gameboard you can click on any available country (highlighted in gray). Clicking on the country will show the challenge description, it’s # of points awarded for completion as well as it’s category:

For challenges that are not related to accessing a network you will be given a file instead. Clicking on the file will download the file to your computer:

From there on it’s up to you to find the flag. The flag is in the format FLAG-2968cb9eee91e0e51e6d24ac219a4dfcc3800e5c (Cryptography puzzles can also be in non-standard formats). Once you find the flag, submit it to the text box below the challenge link and if it is correct your team will be awarded the points!

Closing

And that’s how you play in the CTF. The ability to do challenges will be open from the beginning of the event to the closing bell. Remember, flags can be anywhere, it can inside a file, it could be encrypted, it could be hidden, it could even be inside this blog post, it could even be inside YOU.

And most importantly, have fun 🙂

Friendly reminder that the event will be on April 7th starting @ 9AM