Do we have Rumpelstiltskin?
Do we have proprietary data?
Great.
Give a big hand.
Do we have
Nosy Parkers?
Anybody from that team?
Okay, we'll
have a quick run.
STFU Donny?
You forgot that.
And what about the 4815 team?
4815?
So, 4815
162342.
That's somebody's phone number.
So that's the team name.
I'll just display it.
So we'll display all the top teams here.
Thanks for
joining the CTF, participating,
and playing so enthusiastically.
We had a great turnout
this year. I mean, this was our first
time, actually, organizing the Recon
Village. And it was overwhelming,
both on the CTF front and on
the talks. We had some awesome
submissions for our CFP.
And, of course, some of
you would have also attended the talks here.
So, yeah, we are pretty much pumped up.
And we are all ready to give away the
prizes. Yeah.
Did you call Moose Duffel?
Sorry? Moose Duffel, the team member? No.
So...
No.
No.
We were playing with the fake names.
We had a case where we were not
playing with the real names.
We ideally would like to see your
ID card before we give you the prize.
One of the team members has to be there.
If you were not playing with the
real names, you can show us the login
to the team, and we should be
okay with that.
Yeah, I think we can verify that here.
Somebody will help you out with the
login verification.
And, yeah, then we'll be done with the prizes.
So, I'll hand over
the mic to Kunal.
He's our backend guy. He was, like,
constantly at it, the admin, all the time.
He'll be telling us more details
about how the CTF and the
challenges were made. So, we had
a bunch of challenges around OSINT, and
we were supposed to figure the right
flags. We had a few
companies, which he will talk about
in detail. And...
X64...
Hello, everyone.
So, yeah, good...
Congratulations, guys, first of all
to the winners. And then...
Okay, so, the basic
premise of the CTF was we had an
organization called x64corp.org
that recently acquired a company
called x32corp.com.
And so
someone just hacked
x32corp.org and they posted
some data out there on the internet.
Or someone leaked data on some
GitHub or elsewhere.
So, basically, it was an OSINT. And
most of the challenges
involved recon.
And just finding... Either profiling
the person, profiling the company,
finding some data that's leaked,
all that stuff. And then some of the
challenges for that recon led to
data exfiltration or exploitation of a
server. Those services then leaked
your flag, which was to be submitted.
So, yeah, we had a great
experience hosting the CTF.
So, we had about 190 teams
registering in total. Out of them,
about 56-odd
teams were actually the ones who
played the CTF and, you know, were submitting
flags.
Sorry.
So,
yeah. And...
Uh...
Yeah.
So, as for...
So, basically...
Just a second.
I'll just get the dashboard up.
Okay.
So, we used the Facebook
CTF platform to host this
CTF.
There were a lot of countries. Basically, the countries
were the challenges that needed to be solved.
Right?
Okay.
So...
Excuse me.
Okay.
So, yeah. Hi. I'm Shabam.
Uh...
So, we basically created two
fake websites. We dumped in...
We made a lot of fake, you know,
fake accounts on GitHub, social accounts like
Twitter, Facebook, et cetera, to get the data.
We do not want to use any publicly
available data because we're not really
sure if something mis-happens.
So, yeah.
Uh...
I'm really thankful to Cynac
for sponsoring the...sponsoring the
CTF prizes and all.
These guys have been supporting us a lot.
Uh...apart from that, I would like to thank
all the volunteers, all the speakers,
everyone who attended us,
and specifically, I would like to thank
DEF CON to give us this
platform.
I would also like to thank one of our volunteers
who is not along with us. He has...he's
been giving a lot of efforts to make this...
make this true. Sandeep is not
here. And I would also like
to thank Zant and Grifter
for...for, you know, giving a smooth
communication for, you know, helping
around things for, like, vendor management
and...and logistics, et cetera, et cetera.
So, without further delay,
I would like to call Andrew from
Cynac to give over
the prizes for the winners.
Okay, so
we'll be calling the team members here.
So...
Starting first or last?
Last.
Okay.
Okay. So
we'll be starting from the fifth place, so
the fifth team, if we can have them
here.
Just a second.
Just a second.
.
.
.
Just a second.
.
Yeah, yeah, the website works. I don't have
an internet connection. That's it.
Okay, so...
Can we have team 481516,
any one team member from this team?
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
. .
. .
. .
. .
. .
. .
. .
. .
. .
. . .
Okay. So the third team, the nosy parkers, anyone here? So they get a Chromebook and
a Hack 5 gadget. No one? Okay.
A bash bunny, yeah. Okay.
Then the second team, proprietary data. Anyone team member? Wow. All of them. Big hand, guys.
Big hand. So they are getting an iPad Air 32 GB and a Hack 5 gadget, a pineapple Wi-Fi.
And a Maltego six-month license. Wow. Wow. Yeah. Yeah. So it will be great if you can
share your experience how the CDF was.
Yeah.
First of all, I wanted to just thank you guys for putting this on. The whole village
has been absolutely amazing from the talks to the CTF. I mean, it's an incredible amount
of work to put on something like this. And every room was packed all weekend. So it was
pretty fantastic. You guys did great. But, yeah, it's definitely we had a great time
doing the CTF. It was absolutely a team experience. I honestly don't think there was a single
flag out there that we got that anyone that was a part of the team would have been able
to take.
one team member just ran and did the whole challenge and did the whole thing. Everything
was finding bits and pieces. And then somebody else grabbed what somebody else took and took
a little bit further. And there's a lot of good competition out there, and props to Rumble.
We had a great time. So thanks, guys.
Just a fun fact. Justin was one of the review panelists for the papers. Thanks for that
as well.
Awesome. Thank you.
I'm on my way.
Can you please come here and collect your T-shirts? Can you collect your T-shirts, please?
Yeah. Okay. Then, okay. Then the winners, okay. So they get a drone, a Hunchley license,
and a Hack 5 gadget. That's basically a pineapple Wi-Fi. And then the team is Rumpelstiltskin.
Big hand, guys. Big hand.
You can flash it off. Yeah. Well done, guys. Well done. Yahoo.
So I'd like to invite one of the team members to speak.
And then we'll share their experiences. Yeah. So, yeah. Thanks for putting this on, guys.
It was really fun. It encompassed a lot of pen testing, OSINT, a lot of different techniques,
which was good, because I'm not really an OSINT guy. It's more David. I'm Jesse. That's David.
We were Rumpelstiltskin. Started off as a troll team and turned into the win.
So, but it was a really great experience. Learned a lot. It was a lot of fun. Thank you.
It was a lot of late nights. We're really tired. But thank you.
Fun fact, they are the only team who completed all the challenges. Yeah. Cool.
Well done, guys. Congratulations again.
So before we close this thing, again, I would like to thank all of you.
We're also looking forward to get any feedbacks, any suggestions you guys have,
any suggestions to make it big next time. We'll try our best to do that.
If you want to give the solutions right now, we are open.
Or you can drop a mail to admin at reconvillage.org.
And we'll be more than happy to take it. Right?
Keep the website. Yeah, sure. We'll do that.
Keep the website year-round. Sorry?
Keep the website year-round. Year-round. So we'll be selling the channel on peak.
Yeah. Sure. We'll figure that out. Yeah. We'll figure that out.
Somebody is going to get a list.
Just a fun fact. He has still not looked at his AWS build since we started the service.
Yeah, because I knew if I look at it, I'll close it down.
So I just didn't have a look at it. Yeah.
Amazon sponsored this. And Facebook, because we're using their platform, sponsored this.
Then free.
Yeah, we'll try to get it next time. Yeah.
And at the end, I would like to apologize for any of the mistakes or silly things we have done.
It's the first time we were coming at DEF CON.
So yeah, it was a great experience meeting all you guys and stuff.
I mean, yeah. Thank you all. Thank you.
Thank you so much.
I'd just like to add one thing.
I'd like to thank all the volunteers who give their support for the complete event.
And without them, this wouldn't have been possible. Yep.
So we'd like to call our volunteers who are present here.
And just have a picture on the stage.
All the volunteers on the stage now.
So since third team is not around...
Okay, guys. Since third team is not around,
we are passing on the gift from third team to the fourth one.
STFU Donny.
STFU Donny, you just got lucky today, okay?
Yeah.
He gets a Chromebook.
He got a Chromebook.
Awesome, man. Congratulations.
Yay.
Great success.
It was a great time.
Thank you.
Thank you.
Thank you.
Thank you.
Give it to six or seven.
Give six.
Six teams.
Six teams.
Six teams.
Okay. We have some more goodies.
Just two of them.
We'll go to fifth and sixth team.
Cyber Vookies, anyone around?
Two.
Okay. We'll just keep going to the next team then.
Then Horse Repository?
Yeah.
Woo!
Woo!
You all lucky.
Can I get a high five gadget, please?
High five gadget?
Yeah.
Yay!
Yeah.
Congratulations, man.
Okay.
Okay, do we have the team Pinja?
No?
Cool.
Please come, guys.
Congratulations.
Good job, guys.
Yeah, you get a high five gadget.
Fingers up.
So the first team also gets, I don't know if you announced it or not,
they get a Huntsley license and they get a Malteco license,
so you guys can contact us through email and we'll send you the keys.
The second team got a Malteco license for six months.
They can also contact us over email and we'll get you the license keys.
Yeah?
Thanks.
We would like to call all the volunteers on the stage to get a click.
And I would like to thank all of you.
Thank you.
Thank you.
We'll be coming over tomorrow.
Thanks.
Thank you.