~/talk

CTF Overview and Experience

Talkat Cloud Native SecurityCon Europe 2022 · 2022-05-16..05-17· [security]
slides:none on file

A live warmup shows a CTF platform that actually spins up 60–70 clusters on conference Wi Fi and provisions access via a Taskmaster via Slack that returns an SSH tar bundle. Demonstration breaks out from a privileged container by mounting /dev/xvda1, finding root's .ssh/authorized_keys and a flag submitted to CTFd. Repo for the simulator is available, the surprise is scale and live nodes, and mitigation is avoid privileged containers, tighten capabilities and apply defense in depth.

AI-written summary · about

  1. 0:00Start
  2. 0:32Mental Health
  3. 2:08Previously, in life...
  4. 3:05LAN parties
  5. 3:59Problem solving
  6. 4:16Capture The Flag
  7. 5:45Today - ask questions
  8. 6:45Tomorrow - TRY HARDER
  9. 9:32Demo
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.