[Music]
thank you
[Music]
all right
foreign
[Applause]
Villages were here to talk about what
happened during the conference in the
background who has participated in ctfs
and other hacking activities lots and
lots of hands we're going to start out
with toy makers who did the fancy badges
everyone's using so please
foreign
[Applause]
so I'm here first because we have
currently have a line of folks um
waiting at the vending machine and so I
should probably go back and help button
200 people interacted with the machine
Zero have uh completed the necro lomicon
Quest
so there's still time I think we're here
till four or five
um and badge ID 336 has clicked on the
vending machine
3190 times
and match 248 has done it
3266 times
uh there are extra badges available at
registration for sale so if you guys
merchandise sorry merchandise
um for sale so if you guys are
interested in getting one of these
fabulous blinkies please do and then if
you turn your badge around
they're next to the little Metroid it
says postcon remove R form if you
desolder that resistor it'll make it so
your badge Never Dies and it just starts
blinking a lot and Forever Until the
battery has died so yeah then you guys
don't have to worry about going to
vendors or llamas or you know all that
you did yeah
thank you
all right
um we all next cup we're gonna have Doug
from the safe crack
all right so safe tracking and lock
picking was a lot of fun uh there were
quite a few people who were trying for
this unfortunately nobody got this here
for uh those who are working on it
the combination was 23 33 won so you
were very very very close so great job
see you next year
um
where are you someone up here to tell us
about passenger
okay so this year
um we we had one other contest
previously here at cyphercon
um and I had identified a couple issues
with it that a lot of people had
problems with and and while I'm sitting
in the booth I had a bunch of people
come up to me just trying to get a
password cracking environment running on
their machines
um that was the majority of what I spent
my time doing at the con last time and
so obviously that was an issue that I
needed to fix so this year I designed a
way for individuals to walk up whether
their computer or a thin client and do
all of their password cracking directly
in the browser all you needed was a
browser you get yourself a graphics card
and you go to town which was pretty cool
um worked pretty good I had a couple
hiccups in the beginning but that worked
awesome and it was very well received so
I am happy that all functions
um the contest itself uh when without
any issues which is great great planning
on our part and love it because it's a
pain to fix afterwards
so I have some some stats here from the
actual contest itself
last contest we had a single team that
submitted an obnoxious amount of plain
texts that were duplicates
I'm really really glad that we thought
ahead and took care of that because we
would not have enough compute to sustain
what was going on this year is
absolutely no different
we have one single team that submitted
about 50 of all submissions and that was
about uh 60 million hashes that they
pushed to our our server so that was
pretty uh nice to see that our Forward
Thinking with the server was working
well so that's cool can't uh nice nice
props for that as far as who wins stuff
in the Pro section is anyone from
hashmob here
thank you
no pass mob okay all right well hashmob
took first in the Pro section
um that section is literally us just
absolutely destroying you
um that is that is a uh that is a
difficult one
um but I'm more interested in this free
stuff uh the pro team is really just us
messing with uh our colleagues that we
do contests with um I.E team right
um so I mean that's basically what it is
like we just screw with you guys because
you beat us almost every year and
cracked me if you can so yeah well train
you to do better exactly
um so the street teams
um last year we had an individual that
absolutely blew us away
um because he was a single person on one
single uh cracking rig and
um he won last time and this year's no
different
um toil absolutely murdered the
competition if uh you could come up here
buddy I'd appreciate it
[Applause]
he's absolutely impressive he's going up
against teams that are 20 plus people
that have 20 plus GPU cracking Rigs and
he's taken this on completely so long
um so I am genuinely impressed with the
stuff that this guy does
um this is the second year in a row that
you have won this competition
um and I have two things to give you
thank you
I have a I have a badge that I made
um and all the time anyone came by I
told you you could win a graphics
Processing Unit well I sure as hell it
wasn't lines your graphics processing
units it just may not be usable so
um these these
[Applause]
these are the very first gpus that I
started learning password cracking on
back in the day I had 28 of them and I
just went to town Pastor cracking my
heart out I don't use them anymore
they've been sitting and collecting dust
however I have laser engraved in here
you know the signature climb logo
cracked a con in the year so toil here
we are buddy thank you very well
here now
now the
SE this is great because you have won a
lifetime badge twice now
which means you're done
so
um this is one of another lifetime badge
and with that you get digitals for life
[Applause]
so um the password cracking uh contest
and Village
um was a hit I really appreciate
everybody coming by sitting down
learning a thing or two
um that's why I'm here I was extremely
busy yesterday
um and I appreciate each and every one
of you taking some time
um and talking with me so thank you very
much you guys
[Applause]
now we need uh Joe from the astronauts
Killers Joe yeah come on up here
um and I also wanted to say thanks to
our evening event
performers last night remember uh chip
Tunes dual core and Mikhail where is
anybody there that was a great time
thank you very much for that
Joe come on now
all right everyone I'm Joe from the
Espionage Village I was running my own
contest this year and so I wanted to
thank the 26 participants who figured
out the cipher it was a simple
substitution Cipher I also wanted to
thank all 26 of those participants for
giving me a taste of my own medicine
because I had to decipher your names
that you wrote down
in the little bag here
so I also realized I shot myself in the
foot because I made the message that she
decoded so cool that everyone turned it
in and was like all right so now when do
we get to hack the ambassador's computer
break into the safe and get all this
stuff so I encourage you guys next year
it's going to be much bigger there is
going to be many different parts of the
Espionage contest that we're going to do
so please please please get your teams
now number puzzle cracking Cipher
cracking computer hacking so what we're
going to do right now is we've got the
lovely official drawing here everyone's
names are in
any help
and I think we'll give Mike the honors
of picking the name
all right so the winner thank God some
of the ones I could actually read
decently well Joe steinbring Steinberg
there's one that he won so
this is
thank you
[Applause]
so I said the prize was going to be
awesome so the price is pretty awesome
that's amazing uh I don't know man this
is my first one
um this is really nice yeah this is my
first one so uh
um I just dove in I think that a lot of
the myths
there's a lot of Mythology around
hacking and everything and one of the
things that people don't realize is that
it takes a heck of a lot of persistence
like it if you're really going to act
through something you can spend like a
couple months just to get like one
little answer and that's what like
yesterday was all day that's all I did
was just try to figure out the letters
and rearrange them and everything so
it's a good experience
[Applause]
great all right next up we have Chris
from the ocean Village Chris and Chris
okay
once again I'm not schizophrenic my
wife's name is Chris and she helps me
with the contest all right so well
actually she runs the contest and I just
take all the credit so
um and as I said right uh anyway just a
couple things about the osun CTF if
you're not familiar with it uh ocean is
open source intelligence and so
basically we have two volunt Targets as
we call them uh who who offer up their
lives for us to stalk online and the
contestants go out and try to find
specific pieces of information about
each
On Target and the more information they
find the more points they get and all
that kind of stuff the contests lasts
about three hours so uh so it's kind of
a feverish search across the internet
for information we do this contest for
awareness around how much information is
really out there about all of us and
usually our bond targets are in the
security industry so you would think it
would be hard to find their mother's
maiden name or sensitive information
like that but believe it or not it's not
as hard as you think so it's kind of
raise that awareness
um 30 different flags about two
different balling targets
um and um
and we had 30 teams signed up now
there's no restriction on the number of
people you can have time
we might be changing that next year
let's see about that but or you could
just play individually which is
perfectly fine but but there were over
30 teams that uh participated this year
uh which is a great turnout we really
appreciate that uh but to the important
part
um the people who actually placed in
here and instead of calling you up
I mean especially for first place I'm
just going to ask you to stand up and be
recognized so for the for the third
place team was a Brazilian hacks and if
you could stand up and maybe people
recognize
a team of one back there right
okay pack all the things and scoop all
the things okay
um in our second place we had a
two-person team uh who's their last name
started with w and they were asking me
for suggestions on the team I teamed in
I said well how about the two W's so
they shortened that to do dogs are the
two dubs are you guys
here again
all right and then and then finally in
first place
um this team name is Sig Pony which I've
dubbed the Sig Pony Army I want y'all to
all stand up so everybody
and uh anyway if you don't mind after
the closing ceremonies stop by our booth
one more time and and we'll give you
your your prizes I appreciate it thanks
everybody
business
[Applause]
I'm curious how many of you are
first-time visitors to cyber County
whoa wow that's amazing people are so
awesome invite some friends next time
okay
um next up Dave say fudge
hey everybody it's time for Colin I
gotta lower this so happy to see all of
you if I know you and I have not had a
chance to say hi you didn't come by the
booth you've been busy hi sorry let's
catch up later
um
okay cyber Village Cypher Forest so
first things first Cipher Forest here's
all the answers who worked on The Cypher
Forest
well first let me apologize
we apologize to those who um kind of
discovered a couple of the mistakes so
you know in old game show fashion we
it up
and now I hand all the answers back to
you you can go see that gentleman
so we also had our regular contest
who worked on that
all four of you oh thanks no we had
about 33-ish people come up to our table
and uh I'm a little disappointed because
the last ciphercon because I'm very
careful not to say last year the last
Cipher Khan we had like 83 people come
up and I just kind of have a feeling
it's a lot of you noobs couldn't get
past the first gated uh Cipher in the
program
but a lot of you did try and we give you
guys a lot of credit for that and if you
did decode it one of the things you had
to do was find who our guest of honor is
and traditionally while somebody was a
little annoyed about this
um traditionally I guess of honor is
deceased there's somebody historic in
computer science so we're not going to
tell you who it is but Alyssa you came
up as one of the guest of honors so
congratulations I don't know how but
they could do randomly so good for you
um so one of the other things they had
to do
was they had to make some origami write
their name on it and then come up to us
and say I eat crypto for breakfast
so this is the results of their hard
work
feel free to pick them up later we got a
lot of
got a lot of shitty origami
I'll take the boat hat some frogs
good shot
oh a lot of like frogs the frogs are
cool
um I think the shittiest one was
basically
a piece of corrugated paper which is
like a business card with a QR code
one of my favorites somebody made a box
one person made a box and they wrote
their name Rick so they rick rolled the
origami
I didn't come up with that
but the favor right overall voted
favorite
light
leaks
yeah she made this like is this a tulip
or a
calla lily my wife's favorite flower how
did you know this is what we thought was
like the best so we're gonna keep this
one because it actually shows a lot of
skill and artistic Beauty right
so good for you we wish we had a prize
but we don't so the product
that was very spontaneous because the
way this was going to go down was
we had
we
look if you I look at you with adoring
eyes
um this is really cool congratulations
that's awesome you sat here for so long
and you tried so hard and I knew you
were going to make an origami and I just
gave you the pack of cards did you even
open the pack of cards oh okay good well
you come back next year this may be the
first time that we've ever had a hacker
black baggage for origami so yeah
making a history
on it was poetry digital Templar are you
here
he got it last time because so
congratulations
see you next year because we're joking
that you'd never come back
[Applause]
so this is how it was going to go down
for those of you who tried and have
never done these kinds of puzzles before
we do offer you a round of applause and
your appreciation for your efforts so
let's give them
if there's a part
and we try to make it easier we wanted
it to be a two-day type of challenge so
that way somebody would leave and
they're like man I beat that thing
finally and they walk off crowd with the
badge
this year we had a four-way time so same
four people answered the same three
questions and it doesn't take a genius
to figure that out they probably work
together as a team this is what you call
a four-way try harder yeah four-wheat
drive so how was really going to go down
is see you next year good luck try
harder but this generous band right here
gave away a lifetime badge for someone
who tried to make some good origami and
not that
love it all see next year thank you
[Applause]
um
all right we're going to go over uh
capture the comments look at this guy he
was on his way so it was a collaborative
event this year we didn't actually do
points which is different than in the
past but did anybody get a chance to at
least come and hang out in the capsicon
room and hack on some stuff yeah awesome
it was so much fun like yesterday we had
some people like we skipped college
today so that we could come and actually
play here so that is what I love to see
yes these guys get one for the so
um we don't have a badge for us this
year since it was all open and
collaborative but I just wanted to say
thank you that everybody didn't stop by
and played please keep hacking stuff
so let's see so Wireless ETF this year
there were no coins but there was a very
clear winner uh and to give you a little
bit of like taste of what there was
there was plenty of wireless networks so
there was WPA WEP uh wpa3 that was there
um there were plenty of foxes running
around there are some foxes in this room
that haven't been found either so good
luck if anybody's searching for them
um we also had challenges that were
outside of Wi-Fi we had uh shock collars
we had motion sensors we had alarm
systems
um and I think everybody I think all of
those were all sold by at least one
person
um but really the clear the clear big
prize was there was a light up Cube and
the light up Cube you had to compromise
the wireless network but not just stop
there you then had to compromise systems
that were in that Network then you had
to find you know go down the rabbit hole
so to say get rid access to the box and
then unlock the box from within by
controlling the door lock uh so
agreements I don't know if you're out
there
I don't think he's here but I know who
he is so uh very nice job it was really
impressive because that is a very hard
challenge because it takes not just the
skill of compromising Wi-Fi it doesn't
take just the skill of network
penetration testing it doesn't take just
the skill of application security
testing and then privilege escalation is
all those combined so it have one person
solve it is just awesome I'm really
happy
um and yeah that was about it it was
absolutely awesome yes
yeah well I mean he deserved it it was
absolutely incredible he did it by
himself so nice job
is Josh here from the hacker History
Podcast I want you to come up here so we
can talk about it next all right all
right here take this
I got this one
all right hi everybody I'm car I
run the car hacking Village
imagine if I laughed at your name every
time you said it
first of all thanks
um everybody for showing up and um
actually thanks Mike for having this
conference guys this is pretty sweet I
had a great time
foreign
[Applause]
thanks everybody for stopping by to the
car hiking Village we had
um we had created uh well the last
ciphercon if you were here we couldn't
bring the car in couldn't get through
the door so we had to like not do the
cardigan Village unfortunately that year
so I was like you know what I should fix
that problem so I made a fake car
because we had a car simulator
um and it's available after the con as
well so if you come to me afterwards and
you guys want to use the car hiking
Village simulator later
um I can give you guys a code and you
guys can start hacking cars and stuff
like that after the con as well but we
had a few uh teams uh join us we
actually ran out of cars we only had
it's about 16 cars and we had to just
double people up and triple people up on
certain cars when it got to a point but
I'll go through
um our list unfortunately the names I
didn't want to give people's hacker
names and stuff like that away so we
actually just use their the card in so
each car had their own name so
um the team so I apologize if you were
on this team
anybody who was part of Team fuselada
here they're in third place
no okay that's fine and then we had our
second place was our team Coquette
anybody speaks French that's really
funny hey YouTube cat over there thank
you okay
I'm not a known you were on a team
because we had to double people up so
good job coquettes and um our first
place team which I was not surprised
because they always crushed it at hercon
as well was team tornado which I know is
can boss skin boss he's back there I
think you kind of lost he did a great
job
um all of your points if you come to the
Carnegie Village at Defcon all of your
points will transfer to.com as well
which we might give away some cool
prizes maybe like in the past we give
away cars and stuff so try to do that
again this year thank you very much
awesome thanks
I hope that all of you managed to find
some great stories from what you took
away from yesterday and today and Josh
here see what I did this is a transition
he runs hacker History Podcast and wants
to talk to you and you and you and all
of you so please tell us more about five
minutes that was a fabulous transition
you would make a really good podcast
host I'm just saying all right so hi I'm
Josh
come on okay
all right so cyphercon has a podcast
called hacker history that I do it
wasn't in the program
but anyway anyway so there's a podcast
called The Hacker History Podcast I'd
honestly encourage all of you to listen
to it because it's fabulous and I host
this podcast and I jokingly tell
everyone I talk to that my job is to say
tell me your story and then I laugh at
your jokes and that's basically what I
actually do but for real I we've done
20ish episodes give or take I don't
remember the exact number and every
person I have asked or come on the show
has told me my story isn't interesting
they're all full of and if you
listen these stories are amazing
everyone has a story to tell everyone's
story is amazing and so absolutely if
you want to tell your story and I
encourage everyone here to do it tell me
your Hacker's story I desperately want
it I'm always looking for guests like
the worst part about running this
podcast is just finding people to talk
to it's an enormous amount of work but
please please please come tell your
story listen to the show spread the word
it's a ton of fun and if you need just
like get a hold of Mike or cybercon
they'll put you in touch with me I'm at
Josh wresters on like all the socials
but if you can't find me find cybercon
they'll hook you up please please please
tell me your story I want to hear it
thank you
foreign
Service Pack three
so I have too many lifetime badges up
here I need to get rid of at least one
more
that should be hard
so
I've been
um working for the last year and a half
on Cipher Forest
collaborating with uh 20-ish people
submitting puzzles so if you would like
to submit puzzles in the future you can
help the community as a whole and add it
to this Collective that's going to grow
and grow and grow so again raise your
hand if you've been inside the forest
okay that's a lot more hands than when
you said it before so people are waking
up
yeah
um there's uh so referred to as an army
yeah you guys stand up
okay last I checked your number one by
far in sector Forest
yeah so we who is representing you guys
Nick you're amazing I'll do it next to
do it you want me to do it I'll do it
so cycle Forest has four areas
uh there's the main Wisconsin forest at
night there's this little lightning bugs
fireflies what do you want to call them
flying around and you find a safe at the
end you go into the safe you end up in
AR you're wearing goggles you look like
Tron and you're running through more of
Wisconsin to get to the third part Lake
Michigan
and if you click on the tiny little fish
that jumps out of the water you find a
whole nother puzzle path right
um the fourth area is inside the bottom
there's multiple it's a hacker hangout
Barn this is Wisconsin right and and
there's aliens sucking up cows you know
it's a little weird
um inside the barn is a simulation of
Windows 95
you have to dial into the internet you
have to get into bulletin board systems
um there's a Mac OS you go in there and
solve puzzles more decoding and there's
a teaser for cow Linux which is coming
in 2023 so prepare for the cow operating
system
so
um so your team the army of teams
um was number one would you like to talk
a little bit about some of the puzzles
and claim your lifetime badge sure so I
would love to thank you first of all
thank you
this is amazing this is our first time
in this capacity bringing 16 people from
a University of Illinois to the school
at our Center security club sick Pony so
if it's been amazing experience so far
um specifically about the challenges I
can't get too much word on it I'm just
here representing the amazing work all
16 of our members did together so you
know it
yeah absolutely
I'm proud of everybody here uh all 16 of
you so great work I wish I'd give you
more details about the challenges but
you'd have to ask each one if you see
the sick Pony shirt I guess I'm not
wearing it
from one of our
students out here uh talk to them they
probably have some interesting insight
into the specifics of the questions but
otherwise thank you so much it's been
awesome
so that shirt really is amazing check
out merchandise
all right so if you were not here for
opening ceremony
on all the programs was a six-fingered
hand since the very beginning next year
is year six that this has been leading
up to since the first ever cyphericon so
do not miss it come back
yeah so I want to I want to thank
everybody for coming we're we're here we
are in Wisconsin
elevating the community in hacking and
it benefits everybody as a society so I
want to thank volunteers sponsors
Village leads speakers it really does
take a community to to elevate
um and be proud of yourself for being
here
um I think we all need to go get a lot
of sleep
and uh Cipher force is going to continue
to run so please the the story doesn't
end now
and uh when you come back on year six
it's going to be huge so continue to
hack
thank you for coming
and I close out the event thank you
[Applause]
right here
[Music]