Closing Ceremony
summary
480 registered and 400 attended, making this the largest BSides Lisbon yet; a 3.5‑hour CTF runs with 10 teams, 14 challenges of which 8 get solved. Web flaws include miniHTTP 1.29 arbitrary file read to leak /etc/passwd and a Jinja2 template injection yielding RCE and a private key via Python introspection. An SSH Leapd-style auth bypass and a radio number‑station physical challenge (digits → grouping → base64) both work. RFID badges rely on Mifare Classic nested attack, brute‑forced keys with proxmark to extract an ECC512 private key, and about ten people hack the “unhackable” wallet.
AI-written summary · about
chapters (12)
- 0:00Conference highlights and stats
- 0:51CTF challenges overview
- 2:59Trivia challenges explained
- 6:09Password challenge walkthrough
- 10:13Web and crypto challenges
- 13:08Physical and forensic challenges
- 19:58CTF results and winners
- 21:47RFID badge hacking demo
- 35:06Prize announcements and raffles
- 42:25Sponsor passport prizes
- 49:50Final prize giveaways
- 53:48Closing thanks and next year
