Independent Security Evaluators (ISE) is hosting a no-holds-barred router hacking competition. You're hereby challenged to compete in one or both tracks of the SOHOpelessly BROKEN contest at DerbyCon 4.0. The two contests are listed below.
This is an at-con capture the flag style contest where contestants will be pitted against 10 off-the-shelf SOHO routers, hardened, but with known vulnerabilities. Contestants must identify weaknesses and exploit the routers to gain control. Pop as many as you can over the weekend to win. Contest will take place at DerbyCon 4.0, September 26-27, 2014 in the Aquaduct Room on the First Floor.
Here is a list of the flags you need to submit, and their values.
- RT-AC66U - 3000 points - md5 hash of /dev/mtdblock2
- F9K1194 - 1000 points - md5 hash of the admin password, and screen shot of the system settings page
- F7D7301 - 1000 points - md5 hash of the admin password, and screen shot of the system settings page
- DIR-865L - 7000 points - md5 hash of /dev/mtd0
- EA6500 - 6000 points - md5 hash of /dev/mtdblock0
- TEW-812DRU - 3000 points - md5 hash of /dev/mtdblock0
- TL-WR1043ND - 8000 points - md5 hash of /dev/mtdblock1
- WNDR4700 - 1000 points - md5 hash of /dev/mtd1
- WNR3500 - 7000 points - md5 hash of /dev/mtd1
To submit your flag, send an email to email@example.com with the subject FLAG, and the body containing Team Name, Router model, Flag value.
Prizes are limited! There will be only 1 first, second, and third place winner, and other prizes will be given while they last. If there is a tie, it is the first to reach that score who is the winner.
First place: Must score 32,000+ points.
- Visa Gift Card
- 3x event backpacks with some gear
- Big personalized trophy - to be sent after conference
Second place: Must score 23,000+ points.
- Amazon Gift Card
- 2x event backpacks with some gear
- Medium personalized trophy - to be sent after conference
Third place: Must score 17,000+ points.
- Event backpacks with some gear
- Personalized trophy - to be sent after conference
Non-placing, high achievement: Must score 4,000+ points.
- T-shirts! ... and recognition
This is a surprise contest that will take place at random times throughout the conference. A router will be selected at random and contestants will be given a specific objective. The first team to hit the objective wins!
- Compromise the Linksys EA6500 by 5:00 pm and receive a $100 Amazon gift card!
This year's DEFCON 22 SOHOpelessly Broken contest went well. Congratulations to all of our first year winners! Click here for contest details, and results.
We've had one very successful contest so far at DEFCON, and are looking to have more. If you have a venue where a contest might be appropriate, let us know. We are planning a variety of formats and new challenges, and we're open to suggestions. Email us at firstname.lastname@example.org