Slashdot Mirror
DEF CON "Capture the Capture The Flag" Data
pablos writes "Each year DEF CON hosts the famed Capture The Flag contest. Hackers from all over the world duke it out on the network for 72 hours, hacking for the title. The Shmoo Group diligently logs every packet for posterity, we "Capture the Capture The Flag." Now is your chance to download by far the most interesting, 'sploit ridden, 5.8GB of intrusion collusion ever published. Free for the bandwidth endowed, this is the ultimate IDS testbed."
Hmm...my favorite was the sinusoidal IP address spoofing. Anyone else?
"I'll just chip in a bit for RedHat: I actually have that installed on my university machine." - Linus, '95
At defcon 8 DPS was at defcon and Burrows straight up social engineered his way into the server room and rooted the main box. So technically we had just won but they disqualified him cuase they wouldn't acknowledge social engineering as valid. Before defcon 8 DPS (dead [protocol] society) had pretty much dominated the social engineering contests but defcon 8 was the first year they decided to stop doing the social engineering contests so we were forced to improvise.
Well, since the site is getting hit pretty hard, here is a direct link to all the mirrors:
t f-defcon9
Capture the Capture The Flag Mirrors
If you have a mirror up, please let me know.
If you're using wget to pull the data, please use the following command:
 wget -r -nd --no-parent -R "=A","=D" http://site/path/
US - Wisconsin (100Mbit):
http://www.wi2600.org/mediawhore/mirrors/shmoo/cc
US - Colorado (100Mbit):
http://www.ucar.edu/temp/shmoo-defcon9-ctf/
US - Pennsylvania (T1):
http://www.bitsend.com/defcon9-cctf
US - Alaska (DSL):
http://cctf1.shmoo.com
Please be sure to read the license.
Putting a couple of Gigs data on the net and then having the bad luck to be posted on Slashdot is going to mean that their link will be unreachable for most of the day. :-) But hey it will probably make for neat graphs.
Use Adsense for Charity
Did you read who these people are? I don't expect acquiring bandwidth is much of a problem, if you know what I mean.
Special Relativity: The person in the other queue thinks yours is moving faster.
Mirror in the making at http://deimos.siliconinc.net/cctf
Its currently chugging away at about 250 kbps, so it should be done within a few hours. There is already 1+ gig of data up there for your browsing pleasure, and its chugging away at around 250kbps. Enjoy. If it breaks email me or something.
Insert witty
My favorite trick to get into the server room was to put on an old hard-hat and a fluorescent jacket.
Yes, my favorite way to get into the server room is to dress up as a member of the Village People, and then wait for some random person to agree to take me into the closet.
the shmoo group's data gives an idea of the type of attack tools that are most commonly used in intrusion attempts, but if you want to know the tools and techniques that are the most likely to succeed, it would be good to talk to Caezar or some other member of the ghettohackers. After all, they are the ones who win at capture the flag year after year....
"Weapons should be hardy rather than decorative" - Miyamoto Musashi
I think that goes for OS's too
The rules for CTF at DC9 were, unfortunately, not well tested prior to the actual event. The intent of the rules were to provide more targets to attack, by shifting the burden of providing targets to the competitors. However, with the rules as written at the beginning of the contest, it turned out to be (pointwise) not worth attempting to hack. The net effect of the rules were that most groups were simply putting up a server, getting the points and pulling it down. While this is a valid strategy for that ruleset, it doesn't make for much of a hacking competition. This constant churning of servers also made hacking difficult, with targets disappearing by the time you could identify them through the standard CTF network instability.
We (the GhettoHackers, with the much appreciated help of Jennifer Grannick) managed to slowly, over the course of the competition, convince Miles to change the rules to a set more conductive to an actual hacking competition. When teams began merging due to the rule changes, we merged with Digital Revelation, to both group's benefit. We gained their server points, and they gained our capture points.
Besides winning CTF, the GhettoHackers / Digital Revelation team also had the highest average Blood Alcohol Level of any group (check out http://cow.pasture.com/~tcroc for more details). As announced at the awards ceremony, we, the GhettoHackers, have retired from CTF after DC9. To help foster more competiton, and for a different application of our expertise, the GhettoHackers will be helping to run CTF at DC10.
Democracy is dead. All kneel to the Commander In Thief.