Alibaba Security Meetup-Hacker Community Event
Details
Pure gold medal for Top 1 of Hacking game!!! └(^O^)┐
Nine different locks and tools! Try to pick a lock by yourself!! ┌(^O^)┘
Calling all Hackers! Come join us!!! └(^O^)┘
Important:-
In order to get through the venue's building security, please fill up the following pre-registration form:
https://forms.gle/yYicH9dEDtcgkUgi8
Once you arrive, an Alibaba/Lazada employee will check you in near the reception.
This month we will hold a Hacker Community Event.
Organizer: Alibaba Security, LAZADA
Partner: YES WE HACK
Agenda:-
17:30-18:00 Sign in
18:00-18:30 Ice breaking game & Dinner& networking
18:30-19:40 Hacking game & Pick a lock game
19:40-19:50 Bug Bounty Announcement
19:50-20:00 Award ceremony for hacking game
20:00-20:30 Secure SDLC by Shivendra Saxena
How to implement security at every step of the software development lifecycle. We will talk about developer training, design reviews, threat modelling, code reviews, pen testing and bug bounty management.
20:30-21:00 The solution of the challenges by Bitk
Give the solution of the hacking game and how he found these vulnerabilities in the wild during bug bounty hunting.
Introduce YesWeBurp his new burp plugin.
Highlights：
-
Hacking game
-1h to solve
-3 levels
-All of them are real vulnerability from bug bounty
-Pure gold medal for Top 1
-A famous hacker gives the solution and shares tips and tricks about how to find a vulnerability. -
Pick a lock game
-Nine different locks and tools
-Learn about the vulnerabilities of lock and locking devices.
-Try to pick a lock by yourself. -
New bug bounty
-ASRC private bug bounty program
- ASRC Vulnerability Rewards Program
- Other
-Dinner&Beer
-Break ice and Gather stamps Game
----------------------------------------------------
About Speaker:
Shivendra Saxena
Shivendra is an application security professional working across various verticals such as eCommerce, BFSI, and consulting services.
He has demonstrated driving secure SDLC includes developer training, threat modelling, design reviews, code reviews, penetration testing, and bug bounty management.
Currently, he is the Head of Security Testing at Lazada South East Asia managing a team of penetration testers.
Bitk
Bitk is a famous French Security Researcher, Bug Hunter, Member of the French CTF team @Hexpresso and Tech Ambassador at @YesWeHack.
He is the author of YesWeBurp (a must have bug bounty plugin).
Some of his CTF achievement are:
1st place CsCamp CTF 2012 (Egypt)
1st place Atast CTF 2013 (Tunisia)
1st place Hacknoledge 2013 (France)
2nd place Steria Hacking Contest 2013 (France)
1st place Steria Hacking Contest 2014 (France)
1st place International Forum on Cybersecurity 2014, 2016, 2017 (France) 2nd place Defcon open CTF 2014 (USA) 1st place StHack 2018 (France) 4times finalist at the Nuit du Hack 2013, 2014, 2016, 2017 (France) finalist RealWorldCTF 2018 (China) 1st place 50M CTF 2019 (USA)
Rules for the hacking game
This is an XSS challenge, no need to brute force or automated tools.
This is NOT a cryptography challenge.
Your solution for each step will be a single link.
Just bring your laptop and chrome75 installed
----------------------------------------------------
Welcome to join our bug bounty!
For more details about ASRC Vulnerability Rewards Program, please visit:
https://security.alibaba.com/online
We will announce a new bug bounty in the meetup.
If you have any questions, send twitter to us.
We will reach out to you as soon as possible.
Twitter:https://twitter.com/AsrcSecurity
Regards,
Alibaba & Lazada Security Teams
All together, Be Better