So, uh, just to introduce myself, I'm Caves. I... Hi!
Full disclosure, I just found out that I'm responsible for this whole room when I walked into it.
So, don't do anything I wouldn't do.
Also, I hope that, you know, this is everyone's first year here, and you don't know that I was involved in scavenger hunt for the last 10 years.
So, that just really leaves everything wide open for all the trouble you guys could get into.
This is going to be a very, very unorthodox closing ceremony, because...
Because I'm figuring it out just right now.
So, thank you, everyone, and we're going to drink about it later.
So, uh, all right.
I just give my thumbs up now?
Oh, I'm good. All right.
So, uh, even though I went through the trouble of collecting the, uh, scores and the stats for everyone's contest or event,
I definitely did not have time to put any of it on here, because I'm making it up as I go.
So, what I'm going to do is I'm going to call up the name of a contest or event.
If you're here, come on up.
I'm going to talk to people about it, and, um, and then we will be awarding, uh, prizes to the first-place contestants.
Thank you!
I'm so excited that this horrible moment for me is going to be immortalized in, in DEF CON history.
This is great.
It's fine.
All right.
So, um, first of all, thank you to all of the C&E organizers.
Thank you.
Thank you.
I'm incredibly disorganized right now.
So much work goes into this.
Um, we all have day jobs, and, um, this is all just, you know, our love of the con.
This is all of our, all of our time and energy.
So, um, thanks so much to all of the organizers.
Uh, my goons are saving my life right now.
So, please give it up for my goons.
Thank you.
Thank you.
Thank you.
And, since we're, we're getting real deep, and you're learning a lot about me right now,
I just came into this role about a month ago.
So they just met me, and they were very receptive to all of the, the bossing around that I've
been doing while I try to, try to, you know, get my sea legs with this.
So I would like to personally thank them for saving my ass.
All right.
Beverage cooling contraption contest.
Please come up and save me from this.
Howdy.
So, the beverage cooling contraption contest is the most fun you'll ever have.
We had a blast.
We had a whole bunch of teams sign up.
Basically, you cool a beer as fast as you can.
So we have two different competitions.
One where you can bring anything you want in the entire universe.
Just don't tell us what it is, and you'll get it past security.
It's fine.
It's fine.
So you can bring air conditioning units, whatever you want, and you cool a beer as fast as possible.
So we had that competition, and then we have the other one where you can only build your
contraption with stuff you get from the Las Vegas Strip.
So you cool a beer down as fast as possible.
So we got piles of dry ice, isopropyl alcohol, if you don't know, those two together is
negative 140 degrees Fahrenheit, negative 90 Celsius.
So you can cool really fast.
It also hurts your hands like crazy.
So basically, we had those two competitions.
Um.
I conveniently got the scores on my cool burner phone.
So we had two competitions.
We had one.
So Casey, are you here?
He's not.
Okay.
Casey won the unlimited competition.
He brought a chiller plate.
He cooled 70 degrees in seven seconds.
From 105 to roughly like 40 degrees in seven seconds.
Thing was amazing.
He was sitting there siphoning it with his mouth for like an hour.
Um.
And then H.D.
Smitty, are you here?
I don't know if he is.
Doesn't look like it.
Neither of them are here.
But he won for the hack competition.
He built a, he got a bunch of air compressor canisters and blew air compressor canisters
into a dry ice, isopropyl solution, also hurting his hands, and built a cool spinny
thingy out of stuff he found in the trash can in the contest hall.
And he did really, really well.
I think it was like two minutes down to like 40 degrees from 105.
So, also really, really cool.
I think you guys need gloves.
It sounds like there's a lot.
Oh, there were lots of gloves.
Nobody was using them.
Not my job.
We had safety goggles, too.
None of them were open.
So, um, that's pretty much it.
None of them are here.
So.
We'll figure that out later, too.
Yeah.
Cool.
Thank you.
Absolutely a perfect example of safety third.
All right.
Biohacking village.
Do I have anyone from biohacking village here?
That's a bummer.
All right.
I'll get there one day.
That's actually somewhere I've really been trying to get to.
Moving on.
Creative writing short story contest.
Do I have anyone from there?
No.
Okay.
If.
Oh, hey!
Yay!
All right.
Thank you.
No.
It's so great to meet you.
It was a lot of fun.
I'm serum.
I actually won the contest with war dreamer.
So thank you, everybody.
It was a lot of fun.
A lot of hard work.
Love the competition.
Thank you.
Thank you.
Thank you.
Thank you.
All right.
Is Fox here?
Fox?
Man.
Yes!
You have perfected being in multiple places at once.
I knew you could do it.
I knew you would build the technology.
Hi.
I'm Fox.
We did the fox hunt challenge for hunting down little foxes that we saw, and we did
we had. There were three of them in total. It was all for fun. We had one at the DEF CON
sign under the chair. We had one which was really mean behind a projector. And I forget
where the third one was at this point. But, yeah, it was super awesome. Yeah, there he
is, Rich. But, yeah, thanks, guys.
All right. No pressure to everybody else. But this one is very near and dear to my heart.
Scavenger hunt, come on up.
It's so weird being on this side of this.
.
It's all wrong. It's not meant to be this way. This is my contest. I'm supposed
to be with them.
You are over there now. Go sit over there. Hello, everybody. I am one of the judges
with the DEF CON scavenger hunt. If you do not know about us, then I don't know how
you don't. We are the shenanigan raisers here at DEF CON. We have been doing this
for 25 years now.
We typically have teams join from all over the world. Typically, people who
come and play in our contests actually end up being in these positions. They end up being
goons, speakers, and they get really involved with DEF CON because we kind of force you
to do that. You may be remembered for good things, you may not be. That's not my problem.
So we also had a side project join us this year. Well, I should be the one inviting us.
from the National Upcycled Puny Collective, and what's the, the, your institute.
Oh, yes.
So I'm going to get handed over to him to talk about our little side project
that joined us with Scavenger Hunt this year.
Sure thing.
So the shell-on-demand appliance, which you saw is that lovely soda machine,
hanging out next to the Scav Hunt table,
was providing shells to DEF CON attendees anonymously using cash donations.
We do have some stats from it that we'd be happy to share with you.
We sold 483 virtual machines.
Unfortunately, based off of the traffic stats off of each virtual machine,
only 41 of them were used.
Only five VMs had their passwords changed.
Does nobody hack at DEF CON anymore?
What is this?
But nonetheless, it was a great service, and we hope we can bring it back next year.
Thank you, guys.
Winners.
Oh.
I was going to try to fill in the blanks with that.
See, this is what happens when I'm not with them anymore.
It's falling apart, man.
The winners will actually be announced at closing ceremonies.
The big ones.
The big ones.
So if you want to hear who won, you can join us over there.
There.
Okay, so Hacker Runway.
This, I know that the person that ran it is not here.
She ended up losing her voice, kind of like me.
This is not what I usually sound like.
And so she's been running the contest for four years now,
and this is one that I've kind of become really attached to
because one of my favorite things about it is that it's incredibly,
incredibly accessible to people who are, you know,
just getting started in the con, like I did.
One of my favorite things when I first got here 15 years ago
was playing around in Hardware Hacking Village,
learning how to solder, and, you know,
trying to stick LEDs on, like, all my stuff so that it looks really cool,
which is exactly what you get to do with Hacker Runway.
You get to make some stuff, show off your beautiful blinky things
or your actual interactive.
Items, the winners of this contest were actually announced yesterday
live on the stage.
We had a, and I actually don't remember the name of the contestant
because this isn't my contest, but she had an interactive backpack.
I don't know if you guys saw her going around con,
but it was an actual hackable backpack.
So I definitely encourage you guys to maybe look up this contest
because...
The biggest regret I heard this year is that a lot of folks didn't know
that this was a project they could be working on all year
and just bring it out at DEF CON and show off your stuff.
It was so much fun.
So we'll figure that out later, too.
Hack Fortress.
Is Hack Fortress here?
It's okay.
Recon Village.
Thank you.
Thank you.
Thank you.
Hello.
Good afternoon, DEF CON.
So we are Recon Village.
We were hosting the CDF Capture the Flag event.
It was a 38-hour grueling competition where we had about...
Let me check the stats quickly.
I don't remember the numbers.
Alright, so we had about 134 teams all across the globe signing up with 240 registered users.
Being a hybrid system, we kept it for everyone to sign up wherever they were.
We had teams from India, Japan, France, everywhere across the globe playing.
It's basically based on finding information on the internet, reconnaissance, and finding
information on social media.
So, all those 38 hours teams spent smashing their head against the wall.
People came up to me for figuring out who were the creators so that they can grab my
neck.
Thankfully, I remained discreet.
But then we had about 50-odd teams gathering points.
We have three winners, top three winners here.
We had the team Alligator Hunters.
Anyone here from Alligator Hunters?
Oh, yeah.
They are here.
Yay!
Cool.
They came in number one.
They came in number one with 2760 points.
Good job, guys.
And also, we have cool prizes to give away.
If you don't mind, can we do that here?
Yeah, do it.
Perfect.
Right.
These guys are winners for Microsoft Surface Pro.
And, yeah, good job.
Would you like to share your experience, if you don't mind?
They got to know me.
Now they're going to, you know, kick me in the other room out there.
Woohoo!
Congrats, guys.
Perfect.
Cool.
The second team was Team Pinja.
I think we have...
Yeah.
Come on on stage.
Come on.
I think we have a winner.
Awesome.
These guys win Nintendo Switch.
Yeah, you have been playing games with us.
So you win a gaming console.
There you go.
Right.
Unfortunately, the third team is not here.
They were playing somewhere from France.
Team Delaware.
They are winners of RGB keyboard that we have.
So, I'm going to give them a chance to try this.
I think we're going to show it to them.
All right.
So, yep.
It was pretty fun.
It was our sixth year doing this thing.
And we'll be back probably next year again and make it a fun event again.
So I'll hand it over to Shubham.
No, I'm good.
Thank you.
All right.
We'll just see you next year.
Have fun, guys.
All right.
So these guys didn't know this, but DEF CON is throwing in a free pass for the winning
team for next year as well.
Did someone forget their mask up here?
Anyone?
Anyone that came up with a mask that is no longer wearing one?
Apologies.
Sorry.
Thank you.
Thank you.
All right.
Damn, I'm short.
Red alert, CTF.
Are you here?
Maybe.
You had such a sweet setup.
And that is one of my biggest regrets about not knowing that I had to put up these slides,
is that you guys can't see how awesome it looked.
So you have got to come back to my contest room next year and see a lot of the awesome
things that were happening.
Yay!
Thank you so much.
Thank you.
Thank you.
Hey, guys.
We are the Red Alert ICS CTF.
We've come from South Korea.
We've had a, like she was just saying, we've come with a couple of good toys, nice-looking
toys.
If you've come to the contest area, you've seen a lot of lights.
Most of it is us.
It's true.
And we had 61 teams.
I hope they had a good time.
We got our first place.
We got our second place.
We're going to be the first winners right here.
I will not take much time.
First prize was Team XX with 2050 points.
Second was Screaming Fist with 135.5.
And Rank 3 was Taint with 1255 points.
So that's a couple of Korean hats and Korean fans for the first team.
I'm good.
Thank you.
You're welcome.
Thank you very much.
Thank you.
No, thank you, guys.
Another contest that makes me look good.
Thank you.
Do I have anyone here from America's Next Top Threat Model?
No?
Maybe.
Thank you so much.
Hi, I'm Naz.
This is DEFCON's Next Top Threat Model.
We put together a contest where we built a design and a fake company
and basically had contestants go through the design and look for threats
and report those back to the dev teams.
This is our third year.
First year, we were here at DEFCON 27,
and it was...
It was the Threat Modeling Challenge.
I was not very creative with the name,
and Grifter pointed that out,
so hopefully we did a better job this year.
We had two winners.
We had...
Sorry.
Conjecture.
Yeah, so they found a lot of good threats,
and one of the best things during our challenge,
we actually produced a JSON format that we had people provide,
and one of his best threats was,
the use of JSON in the Threat Model is a breach of human rights.
This may lead to excessive alcohol consumption,
griping, and in extreme cases,
hurling of items to organizers.
So when I emailed him, he already left,
I sent a congratulation email all in JSON.
Yeah.
Thank you.
Thank you.
Thank you.
Thank you.
Thank you.
Yeah, so thanks very much for everything.
You know, we plan to be back here next year.
You know, we...
It's like I said, third year.
The company we put together was Drone Online.
It was a company that was in military and warehouse supply chain logistics.
They've decided to get into the food delivery space for last-mile delivery.
What could go wrong with consumers ordering drones mixed with military drones in a mesh network?
So, yeah.
Thank you very much.
The Goldbug Crypt and Privacy Village puzzle.
Do I have...
Do I have Goldbug here?
Yay!
I feel like this is coming together, guys.
Thanks for sticking around.
Hey, everybody.
So I am Kevin with the gold bug puzzle.
The gold bug puzzle is a series of crypto puzzles, not really your modern crypto but
more your stego, here's a picture, figure out what the hell you're supposed to do with
it type puzzles.
So this year we had a really good showing.
We had 230 teams participate from around the world.
We did a hybrid contest this year.
Of those 230 teams, 29 actually scored points.
We had 1,573 wrong answers submitted and 77 correct answers submitted.
And if you're interested, there are still two puzzles that remain unsolved.
So congratulations to Team Psychoholics for taking first place.
By the way, they spent their entire con doing this and I think they violated the
threshold.
It's a three hours of sleep rule.
Thanks, everybody.
All right, tinfoil hat contest.
Anybody?
Hey, Crux, you want to come back up here?
Nope.
Don't go too far.
Oh.
Okay.
Am I going?
Yay!
So what's actually great about these two is that last year, the last time I was faking
things until I figured it out, they saved my ass multiple times.
So, love these guys.
Oh, shit.
Hello, everybody.
No pressure.
So yeah, this is our fifth year doing tinfoil hat.
This started as, you know, it's a total labor of love.
It started because we wanted to put a contest in that had zero entry barriers depending
on your skill level, your physical ability level, your age level.
Everybody can play.
And I see we got some tinfoil hats in the audience over here.
So.
Let's see.
I got to go back to my Twitter here to check everybody out.
But I believe that Stay Skull is right here, correct?
Yep.
So that's our first place winner for.
So this was a tough choice.
We have winners for.
This is a classic tinfoil hat.
This is all tinfoil.
There's no other elements to this.
This won our substance award.
This attenuated the signal the best.
We also had Yoggoth.
I got to look at my Twitter here.
But who won the unlimited category.
So their hat contained tinfoil and other items for structure and style.
And then we also had.
Oh, I mispronounced that.
Yoggoth.
So Yoggoth, are you here anywhere?
Oh, okay.
I'll reach out to him on Twitter.
And then we also have Melissa Miko.
Are you here for style category or style winner?
No.
Well, and the style.
This was second place in our style category.
Our winner style was just huge.
You check out our Twitter.
But it was this huge, elaborate flamingo.
With a flamingo tinfoil hat and braids.
And it was extravagant.
So hopefully we can get you back next year.
But congratulations to our winners.
And we'll see you again.
Perhaps the gym is in there.
All right.
Wireless CTF.
Anyone want to come up here and talk about it?
No?
All right.
Moving on.
IOT Village.
Thank you.
I'm Tivo from IOT Village.
We had two contests running on our Village this year.
The first is the IOT CTF which I think you're all familiar with.
We had awesome turnout this year.
We had over 100 teams that were competing.
This was the biggest CTF that we've ever had.
This was the biggest CTF that we've ever put on an IOT Village this year with over 48 challenges.
We expanded beyond the typical SoHo devices that you've seen in previous DEF CON IOT CTFs.
We had things like the emergency alert broadcast systems that you could exploit and pop a message on our screen.
We had VLE.
We had GLOCOM satellite units.
So it was an awesome CTF.
The top three teams were only separated by a couple challenges.
In third place was Leet the Hard Way.
In second place was Kernel Panic.
And in first place was Team Emojis.
So the second contest that we run, there's a ton of great talented researchers out there that work on IOT devices.
We wanted to recognize some of their work.
But also putting together an IOT CTF is hard.
And we just really wanted to crowdsource some of their work to bring it into our CTF.
So we came up with the CTF Creators Contest.
So you could submit devices that would become part of the CTF.
And we'd grade those devices based on difficulty and CVSS.
And a discretionary modifier based on other factors such as the rarity of the device, the difficulty of the exploits, stuff like that.
So the winner of that contest, Noah, submitted a video doorbell.
It had an off bypass that allowed you to trigger a relay that was meant to unlock the electronic deadbolt that's attached to that device.
So a pretty awesome exploit that would get you into somebody's house.
But what really triggered the max on the discretionary multiplier, something that I think a lot of us researchers can relate to,
is the issues he had when trying to responsibly disclose to the vendor his findings.
And the fact that he had to go out and get a lawyer to cover himself when the vendor tried to sue him for responsibly disclosing his findings.
So that triggered the max multiplier on our score.
So congratulations, Noah.
And I hope that that doesn't prevent you from responsibly disclosing in the future.
So thank you very much.
Finally, we have the EFF.
That's it.
That's it.
That's just a plug for the EFF.
Thanks.
Thank you.
All right.
Another crew that I love a whole lot.
So I hope they're here.
Car Hacking Village CTF.
Thanks.
You made me look good.
I'm here.
Yay!
Should I unplug?
No.
I'm kidding.
That's all right if you want.
Here.
Do you mind?
Would that would be weird?
Is it weird if I just unplug you?
Right here?
All right.
If I do something, it's going to work.
Do the damn thing.
Do the damn thing.
All right.
Look at this.
this. Always works. It worked. No. Really? Why didn't that work? It just did. Okay. Anybody got
it? No. Really? There it is. All right. Yeah. Woo. Live demos. All right. I've always wanted to do
this. I've got a board that's saying everything I want. It's like rewriting it. So I'm going to do
that. Fuck. Fuck. Fuck. Fuck. Fuck. Fuck. Fuck. Fuck. Fuck. Fuck. Fuck. Yeah. Fuck. Fuck. Fuck.
I can make me look good, dude. Oh. Yeah. All right. I just wanted to see what would happen.
it does a real good job okay all right so I'm gonna continue okay so we had a
few teams join our CTF this year a little over 92 so yeah like IOT we had a
ton of teams join us this year so we're gonna bring up our first place if you
don't mind coming up zero Vaughn the GM cybersecurity team joined us so these
gentlemen did a great job they finally got first they're excited and yeah so as
you can see our teams are really small they did a great job they spent the
entire time you know working on a host of challenges that we did we even made a
full virtual 3d car it's so that you you play so yeah come on behind me
I've already given their award it was some go-karts some segway go-kart
scooters so they're pretty excited about them so one of them may have been
damaged in a car accident so we apologize it was their pre-used so
thank you very much for for joining us and come check out the village next year
thank you
thank you thank you
it occurred to me after that the design
is usually that you come up one side and down the other but I forgot to to do
that
oh no hold please
wow buddy no
perfect you know what oh it is it's back perfect
perfect wait no I can't see it though bud what is happening
so do I just go
let's see oh another contest near and dear to my heart
Darknet
This is family, guys.
I love this.
Well, thank you for the introduction.
Hello to all of the doers of Darknet.
Of Defcon.
But, I mean, Darknet's great, too.
So, Darknet is many things.
We can't really sum it all up in one small little thing.
We're an in-person online role-playing game.
We're a contest that's accessible to beginners and challenging for experts.
We're one of the most prolific badge producers.
And kind of a thorn in the contest goon's side for all of our lines.
That's absolutely not true.
Are you kidding me?
I mean, we get 500 people lined up every morning.
Yes, like I said, you make me look good.
Thank you.
We try.
We'll do it again next year.
And we're a year-round community of teaching and learning and fun.
Okay.
This is our 11th year, and it was another highly successful year for Darknet.
For our homecoming, we went back to basics, teaching circuit design and expanding badge life to a record 1,300 new unique designs.
We also had over 200 players in our online CTF.
Standings will come out at closing.
So first, thank you to all the Darknet operatives who made this happen.
It's definitely a labor of love throughout the year and many thousands of dollars in circuit components that we put together to produce all of those badges.
So thank you to the contest goons for giving us the opportunity to put 500 people in line in the morning and helping us manage all of that.
And thank you to all of our fellow contests for your patience as we flood the contest area.
And finally, and last but not least.
Thank you to all of our players.
You are absolutely the reason we are here.
And we look forward to doing more of this for another ten years.
Thank you.
All right.
Do I have EFF tech trivia around?
Okay.
How's it going, everyone?
I'm the cyber tiger from EFF tech trivia.
How many of y'all are familiar with EFF?
Awesome.
If any of you are not, we are a nonprofit that defends digital civil liberties, your rights online and hackers at DEF CON.
And we've been doing it since about one year before DEF CON started.
So we've been around for 31 years now.
And we love the CON.
And we come every year.
EFF tech trivia this year.
We ran.
We had 15 teams all participating in what somebody called hacker jeopardy for kindergarteners.
We had 15 wonderful teams.
And I have the winners here.
One second.
The third place team was the defending champions.
Bollards as a service.
Also the runners of the beverage cooling contest.
So they were a little too drunk to win.
The second team, EFF the system.
And the first place team, Fnordlandia.
So thanks to everybody who played.
It's a lot of fun and it's a way for us to give back to the DEF CON community which does so much to support EFF.
So thank you all.
Come check it out again next year.
We want to make it bigger and bigger.
We want to be bigger than hacker jeopardy.
Damn.
That was like.
You're going to throw down with them now.
Sounds intense.
All right.
Last but not least.
We have command control.
No.
All right.
That works for me.
Because it's very important.
Oh.
Yes.
Defcon mud actually has a winner.
Come on up.
All right.
So, of course, Grifter forgot us.
That's all right.
Everyone forgets who we are.
For those who don't know, I'm EvilMog.
We run the DEF CON Mud.
We partnered with Annoxor and Snacky, the vending machine.
So.
Hold on.
Oh, yeah.
I'm not command and control.
I am EvilMog.
We are different things that did not get a slide.
Yeah.
Sorry.
there's no slides because we're not that cool sorry um anyways so who here had a chance to go
play with snacky the vending machine excellent so we combined in with the defcon mud and we ran
a whole whack load of challenges you had to hack a raspberry pi that was in there we were dispensing
badges now there's a little bug in the game in that people couldn't actually win some of our
challenges unless they cheated and hacked the game like the defcon mud had crippling bugs it
was fantastic but we do actually have a winner so one t we told griffin we didn't but we do now so
uh chargen are you here um jonathan come on up
these guys completed every single challenge on snacky and the mud and took over the admin and
found the fire disclosure bugs and everything else it was absolutely beautiful so they
definitely did a wicked job they must have spent easily two full days in the contest area
by the way
we uh we met the on not extra guys at about three in the morning at defcon 27
and bonded over a mutual love of matt damon and ever since then we've been following them and we
knew we heard we would get a picture taken with them if we won this so we
So waiting for that picture.
All right.
So very much in the spirit of fuck it, we're doing it live.
There are several slides I don't have.
So I'm just going to be bringing up more contests that have winners to announce.
Bear with me a second.
Good afternoon, everyone.
We are PTFS Presents Mayhem Industries.
PTFS is a CTF team.
We decided after a couple years of doing quite well, let's say, that we wanted to run something.
Can we get our winning representative, our winning teams up here?
If you all were in contests and you saw the oil rig flashing away and maybe something flashing under a sheet, that was us.
We had over 80 teams with points on the board by the end of the week.
It was a weekend, very exciting, and a lot of people starting things out.
Top three teams.
Do we have a representative of Team Autofill here?
Can we have Autofill come up, please?
In third place, Team Autofill.
Congratulations.
Thank you.
Giving you a set of bump keys here.
Thank you.
Second place, Team OOIL.
Come on up, please.
We've got a fresh set of tubular lockpicks for you.
Now, during the course of our competition, people got a chance to hack an oil rig, open an alien vault, and discover what was inside.
In this case, this wonderful alien artifact here.
And this is going home with our first place winner, Albin Wi-Fi.
Congratulations.
Well done.
Please get yourそうですねck to 10.
Thank you so much.
I hope we'll be back here next year.
Thank you.
Thanks, guys.
You know that you are not forgotten.
I just ...
Get started.
One, two, three fifty ...
Thank you for coming. We're the Red Team CTF.
We just want to say thank you for all the players that we had playing this year.
We had over 200 teams playing.
So, you know, one of my favorite parts here is just kind of getting to meet all the different players,
helping them through the challenges, and that's kind of, I think, why we do it.
We just love kind of building that relationships, kind of meeting all the players and all the hard work that they do.
So with that, you know, there's a lot of great competition this year.
We saw a lot of movement on the board, and we'll talk a little bit about the players here in a second.
But, you know, we had 85 challenges spread out over two days,
and there's just, you know, a lot of teams working hard on them each and every day.
So it was really great to see that.
We had, you know, roughly over like 10,000 flag submissions.
So a lot of competition, a lot of things going on.
It was great to see everything.
And with that, I'm Nop Research, and I'll turn it over to PonyAP.
Hey, I'm PonyAP.
Just want to introduce the top three teams.
They're coming up right now.
Third place, we have international players.
They came all the way.
They came all the way down here.
They focused.
We did in-person only this year.
And they were down in the contest area.
So CTF Singapore, third place.
Then in second place, we had the Pwner Puff Girls.
I believe you're from all over, right?
From Planet Earth.
Planet Earth.
Thanks, guys.
That's nice.
Appreciate that.
Thank you.
Thank you.
Thank you.
We had a, we were very fortunate to have over $70,000 in prizes.
We split that up amongst the top 10 teams.
And taking home gold for the red team CTF, all the way from Norway, is Team EPT.
And as they're coming up, I just want to say thank you to DEFCON organizers for having us here.
This is our third year.
It's great, every experience that we have.
Thank you for the goons.
They ensured that our contest was very smooth.
We had no issues.
Thank you so much.
And last but not least, thanks to all the players.
They keep us motivated to work on the challenges throughout the year and put in all this effort because it's just great to hang out.
And this is the meeting place every year.
Thank you.
Thank you.
All right.
I think I'm forgetting someone else, right?
Hey, DEFCON.
Dave here.
We're running the...
Been running the...
Maritime Hacking CTF.
So it's SEATF, which works better when there's a slide.
But it's an opportunity for teams to come in and hack real maritime equipment.
We brought about half a million dollars' worth of equipment for folks to hack on.
Most people don't get to attack a ship.
So we had all the bridge equipment, propulsion and steering systems and ballast systems, running the actual OT protocols.
Had 23...
22 teams.
Hold on.
I actually took notes.
Give me a second.
We had...
We had...
We had 22 teams participating.
They captured 186 flags throughout the weekend and spent a total of 1,871 minutes actually
connected to the hardware.
And so the first place team, if they would come on up, it is the emoji team, ship, wolf,
fire, fire, fire.
And...
Woo.
So this team actually spent the entire con sitting in our spaces over in the ICS Village.
So it was a great opportunity and a lot of fun here.
And...
And...
I want to give them a good round of applause and thank you for letting us run this great competition.
Sorry about that.
complimenting someone wearing our merch because it really is all about me we are trace labs we were
here for our fifth year running our search party ctf this is a ctf that gamifies the collection
of open source intelligence around actual missing persons cases the end result is that data being
turned back over to law enforcement help hopefully aiding in the investigation of that missing person
we made some really big changes to our contest right before defcon because that makes sense it
went great the quality of the intel submitted was better than 80 ctf we've ever run we saw 650
contestants form 250 teams investigating eight real missing persons cases submitting almost
4 000 pieces of intelligence
just a mind-blowing experience we found missing persons that were no longer missing
hopefully law enforcement will be able to take those missing people off their books
so really just a great
experience
yes we have an amazing community personally to me the points and the winners are secondary
to the mission but it is is a ctf so someone is going to win
alex who won
yeah so the winner so we have winners based on point values and we have the our highest
winner is the one that submits the most valuable OSINT so the most valuable piece of intelligence
so in our third place we had people of OSINT land second place we had B Berlin first place
we had the FSBs for our MVO we had received a photo taken of the missing person stating they
had been found safe so while many many contestants had found this flag they had articulated the flag
and a cross-referenced it to validate the source of truth and with this this is the
type of significant advancement to the timeline and the type of submission and results that
align heavily with our mission our winning team was OX Forco squad
all right thank you
all right so I I feel like I have to introduce this this crew they came here
um not really knowing where they were going to land because kind of like this making it up as we go
um by the time we got them set up even though they didn't have a sign even though initially they
didn't have a projector very very uh big crowd draw because uh they've been working on this
stuff all year you know what I'm just gonna let them tell you thank you what's up defcon we're
an reports security team this is our first time running an open CDF at DEF condo contest area like
cape says we want to give her an awesome shout out because she's been super helpful this whole time
we set up with nothing
ground, and then as the time progressed, we got a table, and then we got a projector, and then we
got a screen. It was awesome. Next year, we might even have a slide. Next year, we might have a sign,
she says. It'll be artistic. So we ran a Jeopardy style CTF with 16 challenges. We had different
types of challenges. We had web challenges. We had crypto challenges. We had programming challenges
and backend server challenges. We gave away around 200 PCB challenge coins. We had 60 shirts
giveaway. We were about to give hundreds of dollars away at Amazon gift cards to the top
10 streams, and I'll let Jeeva here announce the stats. Hey, everybody. Just a few stats. We had
200 flags captured across 42 teams. First place winner was Huber. They solved almost all the
challenges except for one. Second place was Coco. Third place was Buzz. We want to give a special
shout out to the fourth place contestant, Percent S.
This person was a single player high schooler that dominated for most of the majority of the
competition. So shout outs to wherever you are. The final leaderboard is available at
CTF.atomic.financial. Top three teams, wherever you are, please meet us over there somewhere.
We'll give you some hats, shirts. Thank you to the goons. Thank you to Caves once again for
hooking us up. Thank you, DEF CON. Hopefully, we'll be here next year. See ya.
The Tele Challenge is one of the hardest contests at DEF CON. People spend their entire DEF CON to
play, and I'm very, very proud of Foxbox Dialing Services, who won the Tele Challenge this year.
Come on up on stage, guys.
These guys gave up 1,489 minutes to become the winners of the Tele Challenge this year. We spend
pretty much all year building it, and part of the puzzle is learning that you're in a puzzle. We
showed up as Red Sea Cruises this year, so if you got a, you may have won a free cruise flyer,
that was us. That's actually a sequel of our 2018 game, where we also showed up as Red Sea Cruises.
Just a couple of stats. 3,940 calls.
Came into our systems across the 20 registered teams that played with 294 unique callers. Total
time spent on hold was 955 minutes, and one person sat on hold for 90 minutes. There were 4,402
attacks on voicemail boxes, and we built a casino inside the game if you played. The total
Telecoin casino slot machine polls were 6,163. Red box, red box.
We'd like to invite everybody to look for us next year. Keep in mind, we never show up as the Tele
Challenge. We show up as something else. You need to be prepared to play, and you must play in a team
if you want to win. So I'm so proud of Foxbox Styling Services. They've been trying to play
and win for five years, and this year, they finally got it. Congratulations.
All right. We are Crash Compile, which is we create programming challenges, make you do them live on
stage while we try to feed you a lot of beer and try to distract you in any other way possible. We
had 70 teams register to do qualifications, and then we did the top nine teams on the
main contest floor. If you were there last night, there was a lot of chaos. For the first time
ever, every team competing both scored points and scored points on the final challenge, which means
despite all the beers, all the distraction, all the chaos, every team was still there and competing
till the end. For our final problem this year, teams were competing with each other in a multiplayer
arena. They had to write a program that could explore, take over, and maintain their sake of the
arena. We had to write a program that could explore, take over, and maintain their sake of the
arena for the entire duration of the competition.
Team Jam was our winner this year with 406 points
and took home the custom fabricated Crash Compile
trophy, our giant metal D10 covered in programming
language from Crash Compile history.
Second place with 368, Pro Gamer Moves.
And third place at 258 was Advanced Persistence Sweats.
All right.
So before they start playing the music that, oh man,
I fucked it up again.
Last one, I promise.
I'm back.
Thank you, ma'am.
It's OK.
I'll drink later.
I'll do it.
I promise.
Hey, guys.
My name is Jeff.
I go by the handle Morph here.
If anyone is in the room who is competing
in the King of the Hill challenge for Tamper Evident,
can you start making your way up to the stage, please?
So you, you, yup.
Any of my guys, come on up here.
So Tamper Evident, I'm going to try to keep this quick.
Tamper Evident's right next to lock picking.
We tamper seals, is what a seal looks like.
These guys have been competing in five separate categories
over the course of the weekend.
To open these seals that are locked,
in a one-way manner, right?
They're not supposed to be unlocked.
There is no picking here.
This is a one-way seal.
These guys have been devising defeats
through the entire weekend, cutting each other down
second by second, trying to get to the fastest possible open
without leaving any detectable trace.
Guys, start making your way up here.
So we had five different categories of entry.
These different categories were a red and black,
a little padlock, a little zip seal.
We have a yellow padlock seal.
We have a red zip tie, which looks a little bit like this.
And we had a white plunger.
And of these different categories,
these guys started by opening them in a couple minutes,
right?
People were bleeding all over the seals.
Not quite evident, you might say.
Why is that?
It's safety third.
Yes, yes.
By the end of it, some of these guys
were opening these seals in less than 20 seconds.
At speed, leaving absolutely no trace left behind,
with homemade tools MacGyvered at the competition.
So to announce our winners, Eleazer
opening the red and black seal in 12.97 seconds.
Zeb, if you're out there or up here,
opening the yellow padlock at a 9.5, damn near perfect open.
Let's go with Cardinal, if you're here.
Right here, one of our number one guys beating down
everyone you see here.
In every category, slowly, at a 23 second
open on this particular seal.
And finally, Ian with a white plunger open.
Again, these things are used to lock weapons in the military.
They're used to do your meters at home for electricity
and water, that type of thing.
These guys were able to open these in seconds
with homemade tools and do so in a way that
leaves no trace whatsoever.
Guys, thank you so much for competing.
Tamper Evident, shout out.
And lastly, we also allegedly were maybe the guys involved
with the counterfeit badge contest.
So you might have seen some of these floating around.
There's also a few out there right now.
Shout out to Cookie Fairy with a damn near perfect replica
of a human badge.
Shout out to the CJer for a perfect replica of a goon badge.
Good job getting into the knock.
Impressive.
That's Tamper Evident Village for you guys.
Thank you very much.
And congratulations to our winners.
Thank you.
All right.
I think I got it right.
this time i think that covers uh all of the contests uh and events that um that uh well
they put on great contests sorry uh really stressing here but uh something that i really
wanted to say even though i know i have to wrap up here is my reminder every year if there was
a contest that you didn't see that's a place for you to become a part of this community everyone
here wanted to create something new so they made it happen i don't have contests and events without
you guys so um you know for for every time a contest thanks me i'm just doing my job
sometimes not even that well uh but thank you so much everybody and um
i don't know go uh enjoy the rest of your defcon here there's another
closing ceremony i don't know this is the good one right