Hack the Vault, Save the Conference
A rival conference just stole this one's sessions.zip and locked the whole schedule inside their Vault. The only way to get it back is to break in — so for the length of this session, you become the attacker. Work your way through deliberately vulnerable webshops (SQL Injection, XSS, XSRF), crack a pile of encoded honeypots for bonus multipliers, scan and pop WordPress blogs, and climb the Portal's live leaderboard one captured flag at a time until the Vault springs open.
Most flags are security vulnerabilities we found during our consultancy work. The workshop includes security presentations explaining what is going on, what one can do and how the same can be achieved automatically with open-source tools (nmap, sqlmap, wpscan, ...).
The Portal and blogs provide guidance so that both beginners and veterans can land on the leaderboard. Hints are released as other teams find flags + periodically.
Target Audience
Developers, testers and ops who build software but have never attacked it. No security background needed; challenges scale from beginner to advanced so every level has a fight.
Play solo or form a crew and compete as a team. Bring a laptop that can run Docker.
A driven and flexible .NET generalist who has turned a childhood hobby into his career. As CTO and Competence Center lead at itenium, Wouter gives bi-weekly tech talks and hands-on workshops on a variety of subjects, mostly Frontend, Architecture, Security and, more recently, AI.
He is an architect, Scrum Master but most of all a developer and avid pingpong player. Interested in pretty much everything IT but especially excited about lean, software design, documentation, continuous integration and usability.