@DerbyConCTF

Official DerbyCon CTF Twitter Account

derbycon.com
Joined October 2011
  • Tweets834
  • Following3
  • Followers1.3K
77Media
For those of you that may have earned a challenge coin during the CTF: trustedsec.com/2019/09/crack…
2
We finished 2nd place in the @DerbyCon CTF and have provided a write up of some of the challenges 😎 A big thanks to the @DerbyConCTF team as always! #derbycon labs.nettitude.com/blog/derb…

DerbyCon 2019 CTF Write Up

We recently returned from the always excellent DerbyCon 2019 conference.  We once again competed in the 48 hour Capture The Flag competition under the team name “spicyweasel”, where we were pleased...

lrqa.com
5
50
4
110
derbyconctf retweeted
khr@sh@khr0x40sh12 Sep 2019
Here's my write-up/approach of 3 Challenges from #DerbyConCTF (HerpDerp.DLL, DerpyConFS/DB, kc57_final_fu.exe): wp.me/p2bpi7-t2 @DerbyConCTF

DerbyCon CTF – .NET, MSSQL Shenanigans

Before I get into this, I just want to say I had a blast my first, and unfortunately last, DerbyCon.  It is sad that such an awesome, close-knit, conference came to an end. This year’s CTF wa…

khr0x40sh.wordpress.com
1
1
4
By the way the signature key on the JWT that was "DerpyCon"
1
1
3
If you want to know how to decode that wav
1
3
If you happen to do a challenge write up, please let us know and we'll be happy to retweet for others
1
3
How did you pwn the SQL box? No Metasploit module needed...DerpyDB had impersonation rights to SA...
1
1
6
Congrats to the winning teams!
4
18
3
47
Prizes will be awarded in the main CTF room (Salon F) at 12:15pm. Please have your password ready to verify your team. (We would never store passwords plaintext LOL)
1
4
Have you tried making wordlists from keywords in the context of the challenge instead of RockYou or similar?
1
1
3
flagsfuflags - If you want a challenge coin come up and see us! Nice work on the wav file
1
1
7
So for those still working help.wav; once you have a byte array the 17th and 18th bytes, a[16..17], are a short giving the message length
1
1
Have you closely examined the least significant bits of the WAV file?
2
3
Note: It is against the rules to change passwords, flags, or anything else to prevent others from gaining access/scoring/etc.
2
1
hopefully some duct tape and bailing wire improvements to .59
1
1
Lots of questions about LDAP, we are waiting for the challenge creator (who is not at DerbyCon) to get back to us...We don't know if cracked passwords should work anywhere but the word on the street is they don't...
1
If you are unsure if you have a flag, feel free to submit it to the scoreboard to check, if it is wrong it will simply have you wait a minute before trying again. This does not mean brute force the scoreboard (which is against the rules).
1
Having trouble cracking hashes on paper submissions? What might someone say to you a border crossing?
1
ESXi restarting, purple screen...There are no VM escape vulnerabilities in the CTF. Please do not attempt anything like that.
1
We have no idea why the CTF server keeps crashing...🤔
1
10
Load more