squareroots

As we already announced, we’re organizing a set of workshops during the spring term 2010. This post summarizes the first workshop that was held last week and gave further organizational details. About 40 people participated while we presented — among other things — the order of the topics:

• JavaScript (10.3.)
• SQL Injection I (17.3.)
• SQL Injection II (24.3.)
• File Inclusion/Code Execution (14.4.)
• Regex (21.4.)
• Scripting Languages & Automation (28.4.)
• Network Security (5.5.)
• Review of old CTF services

And of course, there will be the infamous final CTF contest for the best attendees who survived the workshops To attend the workshops, the most important thing is to subscribe to the workshop mailing list. If you did not participate in the first workshop: Feel free to be chatty on the workshop mailinglist, the list is intended to be your communication platform for workshop related problems and questions. Additionally, don’t get frustrated to quickly. The challanges are design to, well, challenge your endurance and will to find out the hidden secrets even if it gets uncomfortable All slides and stuff will be made available on the workshops server — get access to it subscribing to the workshop mailing list

As every spring term, the squareroots are organizing a series of security related workshops. These workshops deal with all kind of IT security related topics like crypto, network security and webhacking. Since we want to encourage all students of the University of Mannheim to participate, no prior “hacking knowledge” is necessary.
Everyone who is interested — not restricted to students in any sense — in getting a substantiated introduction to IT security and hacking techniques is welcome to participate in the first workshop on march 3rd, 17.15, Pi-Pool. During this first session, we will present the covered topics, some organizational stuff and doing a first pratical, basic hacking session. All slides and stuff will be made available to the participants. A summary will also be published in this blog.
If you have any further questions, feel free to contact us. Looking forward to see you there

For all of you who are waiting for a RuCTFe Walkthrough: It’s in the queue…
We will put some stuff together (especially for the probably most interesting simple-service), but due to the upcoming iCTF, we are quite busy. Since the iCTF even outreaches the 43 Teams of the RuCTFe, we are pretty sure to see all of you guys there. We visualized the 54 participating iCTF teams, and this is really quite impressive! Preparations are going fine and the team is already chomping at the bit to get started. The tournament will begin on Friday, 04.12.2009, at 17:00 (GMT+1).
Updates on potential (local) visitor support, will be available soon.
Looking forward to have another great contest!
UPDATE:
Webcam and tournament information is available at http://webcam.squareroots.de

… our first first place! Yesterday, we were able to score the first place at RuCTFE 2009!

A detailed review will come! Big thanks go to the organizers, all participants and our greatest team in the world!

Thank you also very much for your congratulations!

Tomorrow, the first RuCTFE takes place. This capture the flag competition will be organized and implemented by the Russian team HackerDom of the Ural State University. In the past Hackerdom organized a few RuCTFs, but exclusively teams of Russian universities were allowed to attend to these CTF contests.
This time it will be the first time, that teams from other countries are allowed to attend this capture the flag and of course we will be there and steal the flags

We invite all students who are interested in IT security to visit us from 3pm in the hlab.

Here again the most important data:

• Date: Saturday, 07.11.09
• Rules: http://ructf.org/e/2009/rules.html

Since this blog gets more and more hits concerning common CTF information, we are switching to english

We will participate in HARCTF, which is a CTF contest organised by hcesperer and taking place at the Hacking At Random security conference. Since hc organised the da-op3n contests for the last years, we are looking forward to play a well prepared contest

Important information:

• Date: 14.08.09, 10.00pm CEST
• IRC: #harctf on hackint
• Website: http://ctf.hcesperer.org/harctf/

Updates will be published here and of course pushed over the CTF mailing list

Since we missed some CTF contests in the past, we decided to host a common mailinglist for information about CTF contests. It would be great if team members of all CTF teams register to the list to create such a common source of CTF information. The list is at ctf[at]lists.ctf-hacking.de, web-based registration is possible, too: http://ctf-hacking.de/cgi-bin/mailman/listinfo/ctf