AppSec Israel 2016 CTF - Revision history

YossiOren: backlink added

2016-09-08T12:18:15Z

backlink added

YossiOren: Added categories, skinned "register now" button

2016-09-07T15:10:10Z

Added categories, skinned "register now" button

YossiOren: Added formatting and unskinned "register now!" button

2016-09-07T15:08:03Z

Added formatting and unskinned "register now!" button

YossiOren: copy-paste from the sched

2016-09-07T14:59:31Z

copy-paste from the sched

New page

This CTF competition aims to encourage and promote interest in web application security, as well as for just having some fun.

We do not see it as a competition really, though there are winners and they are going to win some cool prizes...

There are a lot of interesting talks at OWASP this year that you wouldn't want to miss.. So, it is perfectly ok if you don't end up collecting all flags.. We know, you have been busy..

Here are some FAQ I frequently hear (I never heard them actually, but what the hack?)

Is there any registration needed?

Registration is available here (just add yourself to my sched) or on site, at Komodo booth.

What prizes do the winners get?

There are going to be 4 prizes. 3 top scores will get a prize while one prize will be won by a lottery between all who scores a minimum of 10 points.

If there are 2 attendees who reached the same score, a lottery between the two will be taken.

Oh.. and the prizes.. We'll decide soon enough and let you know.

What is the CTF structure?

We have built a PHP based web application that holds 6 challenges. Each challenge require a knowledge of a different attack or a different attack vector. Once you find the flag, you should use our 'proof of hack' PHP page to get the scores.

We might add a 'buy a hint' functionality, but even if we won't there are going to be plenty of people around who could steer you to the right direction.

What time do the CTF take place?

The CTF will be open all day long, starting at the first talk and till the end of last one.

What should I bring?

Bring your kali linux. Well, there is no need for that really, just kidding.

What you might need is:

Laptop, any OS will do.

Internet connection.

Python installed (2.x I believe)

HTTP Proxy (burp, fiddler, whatever…)

Wireshark, tcpdump or something like that

Internet facing server (but we can provide you with that if needed)

Of course, you might get all flags without needing any of the above. That would be super cool, we would love to see your take on our challenges.

How long should it take?

The CTF is open for the entire day. We estimate each challenge to take approximately 30 minutes, so it is 3 hours altogether.

All challenges are solvable in a matter of few minutes, once you know how. The difficulty level vary from entry level to advance.

There is one which may take quite a while and will require determination and persistency to solve.

← Older revision		Revision as of 12:18, 8 September 2016
Line 1:		Line 1:
	[[File:EventBriteRegisterButton.png\|link=https://appsecil2016.sched.org/event/8CKb\|Register now!]]		[[File:EventBriteRegisterButton.png\|link=https://appsecil2016.sched.org/event/8CKb\|Register now!]]
		+
		+	This year, for the first time, [[AppSec Israel 2016\|AppSec Israel]] will be hosting our very own Capture the Flag competition!

	This capture the flag competition aims to encourage and promote interest in web application security, as well as for just having some fun.		This capture the flag competition aims to encourage and promote interest in web application security, as well as for just having some fun.

@@ Line 1: / Line 1: @@
-[https://appsecil2016.sched.org/event/8CKb Register now!]
+[[File:EventBriteRegisterButton.png|link=https://appsecil2016.sched.org/event/8CKb|Register now!]]
 This capture the flag competition aims to encourage and promote interest in web application security, as well as for just having some fun.
@@ Line 68: / Line 68: @@
 There is one which may take quite a while and will require determination and persistency to solve.
-[https://appsecil2016.sched.org/event/8CKb Register now!]
+[[File:EventBriteRegisterButton.png|link=https://appsecil2016.sched.org/event/8CKb|Register now!]]

@@ Line 1: / Line 1: @@
-This CTF competition aims to encourage and promote interest in web application security, as well as for just having some fun.
+[https://appsecil2016.sched.org/event/8CKb Register now!]
 We do not see it as a competition really, though there are winners and they are going to win some cool prizes...
@@ Line 9: / Line 11: @@
 Here are some FAQ I frequently hear (I never heard them actually, but what the hack?)
-Is there any registration needed?
+==Is there any registration needed?==
 Registration is available here (just add yourself to my sched) or on site, at Komodo booth.
+==What prizes do the winners get?==
 There are going to be 4 prizes. 3 top scores will get a prize while one prize will be won by a lottery between all who scores a minimum of 10 points.
@@ Line 24: / Line 25: @@
+==What is the CTF structure?==
 We have built a PHP based web application that holds 6 challenges. Each challenge require a knowledge of a different attack or a different attack vector. Once you find the flag, you should use our 'proof of hack' PHP page to get the scores.
@@ Line 33: / Line 33: @@
-What time do the CTF take place?
+==At what time does the CTF take place?==
 The CTF will be open all day long, starting at the first talk and till the end of last one.
@@ Line 39: / Line 39: @@
-What should I bring?
+==What should I bring?==
 Bring your kali linux. Well, there is no need for that really, just kidding.
@@ Line 46: / Line 46: @@
-Laptop, any OS will do.
+# Laptop, any OS will do.
+# Internet connection.
-Internet connection.
+# Python installed (2.x I believe)
+# HTTP Proxy (burp, fiddler, whatever…)
-Python installed (2.x I believe)
+# Wireshark, tcpdump or something like that
+# Internet facing server (but we can provide you with that if needed)
@@ Line 65: / Line 60: @@
-How long should it take?
+==How long should it take?==
 The CTF is open for the entire day. We estimate each challenge to take approximately 30 minutes, so it is 3 hours altogether.
@@ Line 72: / Line 67: @@
 There is one which may take quite a while and will require determination and persistency to solve.