Capture the Flag / Web Hacking - OWASP Delaware meeting

Please RSVP at the OWASP Delaware Meetup page: http://bit.ly/owaspDE

As always OWASP chapter meetings are free and open to the public.

We will be playing a round of Capture the Flag (CTF) at this meeting. Target websites will be provided. The targets are intentionally vulnerable web applications that allow us to safely and legally practice ethical hacking. No real websites will be harmed…these will be locally hosted fake sites (some will be built using real products that have had known flaws…so the lessons learned will be valid for the real-world). The agenda in a nut shell:

• A quick demo or two for how to find specific flaws

• It’s your turn – target info will be provided; form teams or go solo, then start hacking

• Post CTF analysis: who found what flaws; discussion and demos of some select flaws found

• Vote: Which person or team won the CTF? Quantity over quality? You decide. Prize includes fame and glory (Void where prohibited; fame and glory not included)

How to prepare:

• Bring a notebook computer with your favorite warez. You can’t go wrong with Kali (www.kali.org (http://www.kali.org/)). However, since this is going to be mostly (or entirely) web application targets then we recommend the Web Security Dojo (https://dojo.mavensecurity.com (https://dojo.mavensecurity.com/)), as it comes pre-load with targets for you to practice against before and after the event. We highly recommend using VirtualBox ( https://www.virtualbox.org/wiki/Downloads ) to install Dojo. Instructions for getting setup with the Dojo are included here: http://files.meetup.com/16676252/Dojo-intro-and-setup.pdf

Are you really ready for this? Well, unless you do this for a living then probably not, but that’s the point of coming to OWASP meetings…to learn. So prep the best you can, and come out willing to learn. Join a team of more experienced players, and absorb as much foo as possible. As an OWASP chapter we plan to have CTFs on a regular basis, so you’ll get better over time.

What about parking?

City parking is fun! Be sure to check the street parking signs. You only need to feed the parking meter up to the final time posted or 6 PM, whichever comes first. So if sign says 4 PM, then you don’t need to feed the meter past that time.

Street meter sign on 13th Street just off Market Street says up to 4 PM (not 6 PM). So that makes it cheaper than typical downtown parking, and free in the case of our meeting at 6 PM.