Re: DefCon CTF (was: DefCON NOP Redux)

[Doc Brown <drb () nopsr us>]

On Wed, Aug 13, 2008 at 04:47:01PM -0400, Dave Aitel wrote:
> One thing that was interesting this year at Defcon was CTF, which was a 
> bit of a blowout, even though the game itself was reasonably fair and 
> there were lots of good teams competing. At some point it would be cool 
> if school of root (the winning team) posted how they did it.

Team 1@stPlace enjoyed our 2 year winning streak, but we got sch00led
hard.  :)  I couldn't be happier to lose[0] to them, though.

As an outside observer of their team for many years, I think that SoR
finally overcame the classic "too many people" problems and didn't step
all over themselves like has happened for many teams over the years with
more people than can sit at the CTF tables.

Additionally, I think Kenshoto also raised the bar on the reversing,
which gave a (well-deserved) advantage to the stronger reversers.
I'm sure CollabREate[1] didn't hurt SoR either.

As a quick list, I'd say this year the main difference seemed to be very
well considered custom shellcode, excellent automation and tracking,
strong network defense, and some additional tricks that we have some
theories about.  I'd love to hear more details too.  :)

-Doc

[0] http://flickr.com/photos/avys/2756384186/in/set-72157606575832846/
[1] http://idabook.com/collabreate/

-- 
Doc Brown                                            @nopsr.us
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave