derbyconctf @DerbyConCTF

Official DerbyCon CTF Twitter Account derbycon.com Joined October 2011

Tweets

835
Followers

1K
Following

3
Likes

58

derbyconctf @DerbyConCTF

6 years ago

For those of you that may have earned a challenge coin during the CTF: trustedsec.com/2019/09/cracki…

0 0 2 0 0

LRQA Cyber Labs @LRQA_Cyber_Labs

6 years ago

We finished 2nd place in the @DerbyCon CTF and have provided a write up of some of the challenges 😎 A big thanks to the @DerbyConCTF team as always! #derbycon labs.nettitude.com/blog/derbycon-…

5 50 112 0 8

khr@sh @khr0x40sh

6 years ago

Here's my write-up/approach of 3 Challenges from #DerbyConCTF (HerpDerp.DLL, DerpyConFS/DB, kc57_final_fu.exe): wp.me/p2bpi7-t2 @DerbyConCTF

1 1 4 0 0

derbyconctf @DerbyConCTF

6 years ago

By the way the signature key on the JWT that was "DerpyCon"

1 1 3 0 0

derbyconctf @DerbyConCTF

6 years ago

If you want to know how to decode that wav

1 0 3 0 1

Download Image

derbyconctf @DerbyConCTF

6 years ago

If you happen to do a challenge write up, please let us know and we'll be happy to retweet for others

0 1 3 0 0

derbyconctf @DerbyConCTF

6 years ago

How did you pwn the SQL box? No Metasploit module needed...DerpyDB had impersonation rights to SA...

1 1 6 0 1

Download Image

derbyconctf @DerbyConCTF

6 years ago

Congrats to the winning teams!

4 18 48 0 0

Download Image

derbyconctf @DerbyConCTF

6 years ago

Prizes will be awarded in the main CTF room (Salon F) at 12:15pm. Please have your password ready to verify your team. (We would never store passwords plaintext LOL)

0 1 4 0 0

derbyconctf @DerbyConCTF

6 years ago

Have you tried making wordlists from keywords in the context of the challenge instead of RockYou or similar?

1 1 3 0 0

derbyconctf @DerbyConCTF

6 years ago

flagsfuflags - If you want a challenge coin come up and see us! Nice work on the wav file

1 1 7 0 0

derbyconctf @DerbyConCTF

6 years ago

So for those still working help.wav; once you have a byte array the 17th and 18th bytes, a[16..17], are a short giving the message length

1 0 1 0 0

derbyconctf @DerbyConCTF

6 years ago

Have you closely examined the least significant bits of the WAV file?

2 0 3 0 0

derbyconctf @DerbyConCTF

6 years ago

Note: It is against the rules to change passwords, flags, or anything else to prevent others from gaining access/scoring/etc.

2 0 1 0 0

derbyconctf @DerbyConCTF

6 years ago

hopefully some duct tape and bailing wire improvements to .59

0 1 1 0 0

Lots of questions about LDAP, we are waiting for the challenge creator (who is not at DerbyCon) to get back to us...We don't know if cracked passwords should work anywhere but the word on the street is they don't...

1 0 0 0 0

derbyconctf @DerbyConCTF

6 years ago

If you are unsure if you have a flag, feel free to submit it to the scoreboard to check, if it is wrong it will simply have you wait a minute before trying again. This does not mean brute force the scoreboard (which is against the rules).