HITB2014AMS - Capture The Flag

May 28, 2014 - May 30, 2014

Teaser update:
Registration & scoreboard url: http://ctf.haxpo.nl/
Official IRC: #hitbctf  on freenode
Launch-time: 18:00 UTC, 03/03/2014

TL;DR;

HITB CTF Teaser: 3rd of March - 28th of May online; one prize for first to finish.

HITB CTF: 29th and 30th of May, on location at De Beurs van Berlage. Teams of max. 3 people, register by sending email to perzik {at} hackinthebox.nl

Hack in the box Amsterdam 2014 CTF - State of Security

Do you understand the difference between SIGINT and SIGHUP? Are you able to untangle complex logic problems? Do you value your FREEDOM and SAFETY? Then we want YOU to join us at the Global Security Initiative.

The Free World is changing, and so are its enemies.  Gone are the days of easily identified dictators. Gone are the days of early warning missile detection systems. We are entering a new era of applied intelligence and reconnaissance methodology. War has changed. Battleships have been replaced by bitcoin powered botnets. Soldiers exchanged by script wielding cyber spies. Basic wiretaps have evolved into complex cryptograpic and sidechannel attacks that need to be executed with surgical precision.

The Global Security Initiative is the first and last line of defense against the threats of digital warfare. Ever vigilant in defending our critical infrastructures, safe guarding the digital economy and protecting your online privacy. In the fight of Us versus Them, the GSI does not discriminate between gender, hat color or multiplicity.  The GSI acknowledges only the Unit, which may comprise of any combination of up to three physical bodies.

So, does your Unit have what it takes to join the fight against terrorism and oppression?  Then join our GSI recruitment program and prove your worth!

The GSI recruitment program will be held on the 29th and 30th of May, 2014 at the center of the Free World: HITB Haxpo Amsterdam. You can register for the recruitment program by sending a mail with your Unit composition to perzik {at} hackinthebox.nl Beware: first come = first served.

For those prospective GSI Units that wish to hone their skills before the official recruitment program, we shall release a small training exercise on the 3rd of March. This exercise will remain publicly available until the start of the recruitment program, but the first prospective Unit to complete it will receive a small prize.

What to Bring?

- Laptops
- A network switch
- Network cables
- Extra power sockets.

Each team is limited to a maximum of 3 people and at the end there can only be the top 3 winners.

Prizes and Recognition of your Mad Skillz

1st Place – TBA

2nd Place – TBA

3rd Place – TBA

 

Teams Signed Up

1. (UK) 0xbadf00d


2. (NL) Beginbazen


3. (NL) Hack.ERS


4. (NL) Pruts.ERS


5. (NL) hDs


6. (NL) Heap Heap Hooray


7. (NL) WomenInCyber #1


8. (NL) WomenInCyber #2


9. (NL) '; drop table teams --


10. (DE) StratumAuhuur


11. (NL) VUBAR


12. (NL) Beurs©rash


13. (GR) Pingu


14. (NL) Team Red Ace


15. (NL) :Duurtlang


16. (US) Three Men in Black Hats


17. (DE) 0ldEur0pe


18. (RU) TechnoPandas


19. (RU) BalalaikaCr3w


20. (??) SIGSTOP

0 slots remain open. Sorry guys, we're 100% booked. (for now) :-)

HITB2014AMS - HackWEEKDAY

Sponsored by

May 28th, 29th & 30th 2014

HackWEEKDAY is back once again with a 3-day long developer hackathon (eight-hour session per day) held alongside HITB Haxpo

HackWEEKDAY at HITB Haxpo

HackWEEKDAY is back at HITBSecConf2014 - Amsterdam with even more challenges, greater cash prizes and an all new 3-day challenge featuring LEGO Mindstorms! Running alongside the first ever HITB Haxpo (May 28th, 29th & 30th), the quest - as it has always been - is to find the most 1337 software developer in Europe!

During the past 3 years of HackWEEKDAY, we’ve seen several great projects with a majority of them managing to turn their initial ideas into full blown working demos within the 24 hour period. Some of these are:

Social Mapper - a social networking app with augmented reality (HACKWEEKDAY HITB2013KUL Winner!)

DiCOM-WAVE – An open source DICOM image viewer with Microsoft Kinect as its control interface (HACKWEEKDAY HITB2012KUL Winner!)

YAP - yet another plugin, a firefox browser plugin to check SHA1/MD5 hashes of files (HACKWEEKDAY HITB2012AMS Winner!)

inSecureHITB - a Windows 8 application to analyze users’ exposure level to stalkers. Additionally analyze social behavior of observed person.

DNSSocial – DNSSEC Management Made Easy

TALEB – A unique social communication & collaboration platform made for students

Touch’N'Go Android Reader – An app which utilizes NFC-enabled phones to read MiFare cards

 

HACKATHON CATEGORIES

0x1-day App Hacks (8 hours per day)

Day 1 of Haxpo (28th May) - Firefox OS mobile applications

Day 2 of Haxpo (29th May) - Facebook Social/Parse APIs applications

Day 3 of Haxpo (30th May) - Build an app for security testing, awareness, privacy or a socially driven SOS app for use in emergency situations. You can also propose your own idea of an app.

An example of a socially driven SOS app would be; make use of various social networking APIs to ‘call for help’ amongst all your friends or perhaps sync to a public “call for help” emergency website where  emergency services, police or the general public can be notified and come to the distress person’s aid. The ideas are many but the main purpose is singular - to build an app for the general public and ‘the greater good’! : )

Note: The 0x1-day App Hacks category is open to individual developers. You can choose to participate in ONE of the 2 days or participate in all. Since there are only 8 hours to each day, you can add features to existing apps for both categories, which has to be a considerate amount for it to be considered a prize worthy of.

[Note] We have a total capacity of 75 developers for 0x1-Day App Hacks.

0x3-day Hard Hack Soft Fu (8 hours per day - D1 = build, D2 = code, D3 = compete)

Day 1 - Day 3 of Haxpo (28th -> 30th May) - LEGO Mindstorms EV3 Challenge - Using a LEGO Mindstorms EV3 kit (model number 31313), build an M&M colour sorting robot that can sort the most number of peanut M&M’s in 120 seconds. Each team will be provided with 1 x LEGO Mindstorms EV3 kit and 3 bags of peanut M&Ms [140g]. Your robots must be ready for competition by 13:37 CET on Day 3 of HITB Haxpo (30th May)

Note: You will need a team of 3 in order to participate in the 0x3-day LEGO Mindstorms challenge. We have space for 10 teams in total and priority will be given to .edu participants. Professional developers can still participate, however you must be affiliated / a member of an EU or NL based hackerspace.

[NOTE] Please read the Rules & Regulations, and Terms & Conditions before signing up: http://bit.ly/HW2014AMSRnR + http://bit.ly/HW2014AMSTnC

 SIGN-UP NOW: http://bit.ly/HW2014AMSReg

 Need a place to stay? Official Event Hotels: https://bvbroomkit.nl/hack-in-the-box

PRIZES

0x1-Day App Hacks

Day 1 (28th May) - Firefox OS Mobile Apps - EUR500 (TBC)

Day 2 (29th May) - Facebook Social/Parse API based Apps - EUR500

Day 3 (30th May)  - EUR1337 for the ‘most 1337 coder’ (sponsored by Mozilla)

0x3-Days Hack (Lego MindStorm Challenge)

1st place team  - 1 set of the Lego MindStorm EV3 kit

2nd place team - EUR250 (TBC)

3rd place team  - EUR150 (TBC)

 

Accepted participants to HACKWEEKDAY will also receive

**   1 x complimentary pass to HITBSecConf2014 on the 29th & 30th of May (valued at EUR1337)

**   Access to the HackWEEKDAY ‘arena’ (Food and drinks provided).

**   Access to the #HITB #Haxpo and #HITB2014AMS high-speed network

 

WHY HACK ON HackWEEKDAY?

1. 
   

   Develop an interest in building, making, hacking hardware and software to solve specific problems.

   
   


2. 
   

   Propose, develop, improve or update the functionality of existing FirefoxOS / Android / Windows Phone 8 applications.

   
   


3. 
   

   Develop new socially-driven applications using Facebook’s APIs and/or Parse’s back-end as a service.

   
   


4. 
   

   Develop a socially driven SOS alert application for public good.

   
   


5. 
   

   Propose a new and cool idea that the participant could come up with based on any of the technologies mentioned above or any other HTML5-based applications.

   
   

 

PARTICIPANT CATEGORIES

STUDENTS - Students from Higher Education Institutions. Entries for “0x3-day Hacks (Lego)” must be in a group of 3 students who are able to be at De Beurs van Berlage across all 3 days (8 hours per day).

PROFESSIONAL / HACKERS - Developers, enthusiasts, hackers from the industry. Entries for “0x1-day Hacks” are on individual basis with one qualification for each sub-category. If you wish to join the 0x3-day Hack, you must be affiliated / member of an EU / NL hackerspace with a team of 3 in order to participate.

_______________________

 

Registration for HackWEEKDAY is COMPLETELY FREE . We have space for a total of 75 developers and 10 teams of 3 for Lego MindStorm challenge.

The full event agenda will be published in the first week of May.

 

Got questions? Email us! hackweekday@hackinthebox.org

Sponsored by

 

Sogeti Social Engineering Challenge at HITB Haxpo

 

 

PRICE: Free

May 28th, 29th & 30th 2014

Sponsored by Sogeti, a 3-day long competition for Social Engineering* held at the HITB Haxpo.

Sogeti Social Engineering Challenge at HITB Haxpo

People. Hacked.

For the third year in a row Sogeti organizes the Social Engineering Challenge. In 2012 and 2013 we asked our contestant to show us weaknesses in the top 100 Dutch organizations by social engineering. This year, the challenge has a twist! Participants will need to use their creativity and a hacker-mindset to solve many different Social Engineering Challenges in and around the Haxpo. The contestant most capable of “thinking on their feet” and applying their social engineering techniques is bound to win. This year’s theme is “girls vs. boys”. Along with the Hack in the Box organization we are curious, which sex is the best at social engineering?

So if you want to:

- Try out the single most effective hacking technique yourself

- Prove to yourself and the world you’re a good social engineer

- Interact with interesting people at and around the Haxpo

- Have some fun

- Win free stuff

Then join our Sogeti Social Engineering challenge! Register at ssec2014.eventbrite.com, or sign up at our booth.

Don’t worry if you’re not acquainted with Social Engineering. We’ll help you on your way. Our professionals will be available to test your pretext and exchange thoughts on how to learn or refine your social engineering techniques. Reciprocally we like to learn from you how you solve the challenges. After the challenge, will put our combined findings in a report which will be shared publicly.

Anyone can register and registration for the Sogeti Social Engineering Challenge is COMPLETELY FREE

The challenge runs each Haxpo-day from 10:00 – 16:00.

Each day we pronounce a daily winner the grand prize goes to the best boy or girl over all 3 days.

We have a MAXIMUM of 50 contestants per day so make sure to fill out your pre-haxpo registration at http://ssec2014.eventbrite.com.

 

Questions? security@sogeti.nl

* Social Engineering is the ability to consciously influence people into performing actions or divulging confidential information.

The Awesome Presentations Waiting for You at #HITB2014AMS

Have you seen the finalized list of conference speakers for HITB2014AMS in May? We've got a content-packed line-up with loads of demo awesomeness planned and something for everyone! Please don't forget that late-registration rates for the conference start on the 15th of March. Stay tuned for the keynote title and abstract announcements coming in the next couple of days...

60-minute Goodies

The NSA Playset

Breaking Cloud Isolation

XSSing Your Way to Shell

REboot: Bootkits Revisited

Bitcoin Forensics: Fact or Fiction?

Exploiting Passbook to Fly for Free

Exploiting NoSQL Like Never Before

FRODO: Format Reverser of Data Objects

Compromise-as-a-Service: Our PleAZURE

G-Jacking AppEngine-based Applications

Exploring and Exploiting iOS Web Browsers

Reloading Java Exploits: Long Live Old JRE!

AIS Exposed: New Vulnerabilities and Attacks

Hacking Your Cable TV Network: Die Hard Style

Setup for Failure: More Ways to Defeat SecureBoot

Shellcodes for ARM: Your Pills Don’t Work on Me, x86

On Her Majesty’s Secret Service: GRX and a Spy Agency

Exploit Development for New Platforms Based on 64-bits

Scalable Network Recon: Why Port Scans are for Pussies

State of the ART: Exploring the New Android KitKat Runtime

Legacy Sandboxing: Escaping IE11 Enhanced Protected Mode

JS Suicide: Using Javascript Security Features to Kill JS Security

In the Middle of Printers: The (In)Security of Pull Printing Solutions

LOL (Layers On Layers) – Bypassing Endpoint Security for Fun and Profit

Vulnerabilities Exposed at the Protocol Level in TN3270-based Applications

Alice’s Adventures in Smart Building Land – Novel Adventures in a Cyber Physical Environment

120-minute Lab Sessions

The HITB Labs are hands-on sessions for 75 - 100 attendees and spaces are available on a first-come first-serve basis. If you're interested in attending a session, be sure to be at Track 3 at least 10 minutes before the stated start time.

Sniffing the Airwaves with RTL-SDR

Tintorera: Attack Surface Intelligence of Source Code

Haxpo CFP

Did you miss the conference Call for Papers? Fear not, you can still deliver your next gen research, idea or project that you're currently working on in our all new HITB Haxpo Track taking place alongside the conference on the 28th, 29th and 30th of May. Submissions for Haxpo talks are due before the 31st of March but slots are already starting to fill up!