Posts

KringleCon 5: Golden Rings

📅 Jan 7, 2023 · ☕ 42 min read · 🎅 noobintheshell

This year challenges were covering logs and PCAP analysis, CI/CD vulnerabilities, a container escape, webapp hacking (XXE, CSP bypass), an introduction to AWS CLI for cloud discovery and an introduction to smart contracts.

KringleCon 4: Calling Birds

📅 Jan 8, 2022 · ☕ 81 min read · 🎅 noobintheshell

The fourth edition of Kringlecon! This year challenges were covering webapp hacking (SQLi, SSRF), binary analysis, digital forensics (logs and network capture analysis), Active Directory attacks, learning Python and shellcoding, some encryption attack, analyzing an IMDS service and FPGA programming. Two challenges on Log4Shell were added as well during the challenge.

MacAfee ATR CTF 2021

📅 Feb 20, 2021 · ☕ 17 min read · 🧔🏻 noobintheshell

The first public CTF organized by McAfee Advanced Threat Research Team. Noob friendly.

KringleCon 3: Three French Hens

📅 Jan 12, 2021 · ☕ 87 min read · 🎅 noobintheshell

This year’s challenges were a good mix of defensive and offensive skills. Topics varied from webapp hacking, crypto, log analysis, binary analysis to improving JS, regex and network skills. There were as well some simulated hardware challenges. The most challenging part was the analysis and recovery of a custom blockchain's block that was stealthily altered.