Fri, 10 Aug. 2018, 17:00 UTC — Sun, 12 Aug. 2018, 21:00 UTC 
On-site
Las Vegas, NV, USA
A DEF CON CTF event.
Format: Attack-Defense 
Official URL: https://defcon.org/html/links/dc-ctf.html
This event's future weight is subject of public voting!
Event organizers
8 DEF CON black badges
8 DEF CON leather jackets
24 teams total
| Place | Team | CTF points | Rating points | |
|---|---|---|---|---|
| 1 | DEFKOR00T | 940.000 | 137.500 | |
| 2 | Plaid Parliament of Pwning | 914.000 | 101.223 | |
| 3 | HITCON | 726.000 | 76.015 | |
| 4 | A*0*E | 712.000 | 69.262 | |
| 5 | Sauercloud | 672.000 | 62.899 | |
| 6 | Tea Deliverers | 616.000 | 56.512 | |
| 7 | mhackeroni | 547.000 | 49.828 | |
| 8 | binja | 518.000 | 46.479 | |
| 9 | Dragon Sector | 398.000 | 36.748 | |
| 10 | RPISEC | 397.000 | 35.911 | |
| 11 | Samurai | 396.000 | 35.213 | |
| 12 | BFS | 384.000 | 33.814 | |
| 13 | C.G.K.S | 383.000 | 33.300 | |
| 14 | PwnThyBytes | 379.000 | 32.630 | |
| 15 | koreanbadass | 373.000 | 31.864 | |
| 16 | 0daysober | 363.000 | 30.846 | |
| 17 | TokyoWesterns | 361.000 | 30.447 | |
| 18 | r3kapig | 341.000 | 28.760 | |
| 19 | NASA Rejects | 325.000 | 27.388 | |
| 20 | hxp | 309.000 | 26.037 | |
| 21 | KaisHack+PLUS+GoN | 304.000 | 25.508 | |
| 22 | TeamBaguette | 272.000 | 23.019 | |
| 23 | pasten | 264.000 | 22.298 | |
| 24 | Shellphish | 238.000 | 10.136 | |
Unfortunately I didn't enjoy this CTF much. Although the organizers had very nice ideas for the rules, the implementation of everything was really bad :(
Good things:
- Challenges were removed after some time (which is IMO good for A/D, you don't have to look at one challenge for the whole 48h).
- The organizers were nice and helpful.
- I liked the idea with testing user patches by the organizers before deployment.
- Music wasn't as loud as on previous DEF CON CTFs.
- The number of challenges was small, so non-US teams which couldn't afford sending 30 people to Vegas still had some change to win.
Bad things:
- Terrible Internet connection (but on the last day it was ok).
- There was no scoreboard available for the whole competition (excluding one projector, but it wasn't visible from our table).
- Challenge binaries weren't mirrored locally, so we needed to download them using the slow connection.
- Both CTF network and Internet connection shared the same throughput limit, so downloading anything could break your exploits.
- For the first few hours there was only one challenge available, so there wasn't too much to do, even for small teams.
- The music/videos in the CTF area were literally 10-20 different annoying videos run in a loop. Please play something less annoying or at least make the playlist longer.
- The rules weren't precisely defined, e.g. the normalization part was totally unclear to us.
- Patching system was totally broken for the whole first day, the organizers verified them by hand.
- No food or soft drinks provided :(
- No travel reimbursement + no team size limit - it's *much* harder for non-US teams to compete here.
- "pointless" challenge - I spent more than 20h reversing and analyzing the challenge binary only to not be able to connect to the server, because the organizers failed to host it properly.
- Hidden scoreboard on the last day - I really hate this idea, but it's probably very subjective ;)
How do you choose the best choose the best product among the ones listed here? https://onlychainsaw.com/best-chainsaw-chain/
