Denver OWASP June Meetup - Join Us!

Everyone is welcome! Bring a friend...

Join us on June 18th for food, drinks, networking and an exciting CTF. Networking with your peers starts at 5:30pm.

Note: New location for this month!! Richey May has graciously offered to let us use their offices in Englewood for this month's meeting!

This month's presentation is brought to you by Richey May and Meristem Infosec!

Topic:
A Web CTF for Everyone

Abstract:
This month's event will be a little different. Instead of a speaker, we're offering a hands-on Capture-the-Flag event. Not the "stay up all night finding this one weird trick" kind of CTF, but a CTF designed to teach you to exploit real world vulnerabilities in a real-world application. Entry level participants can explore a poorly designed authorization system and mid-level hackers will have plenty of opportunities to run SQL and JavaScript Injection attacks. For the experts, there is even a pathway to shell, but it will take some real dedication to get there.

The focus will be solidly on learning. A walkthrough guide will be available to get you to the next step no matter where you get stuck, and live demos of each exploit will be given before the evening is through. Even if you're not quite sure what Cross-site Scripting really is, by the end of the night you can have your first exploit under your belt. We'll also be encouraging experienced participants to team up with those who are new to web exploitation.

BRING YOUR OWN LAPTOP with an intercepting proxy (Burp, ZAP, etc.) installed to participate as an attacker. Of course, if you’re not comfortable at that level, feel free to just bring yourself and plan to shadow, watch, and learn.

Installation instructions for ZAP can be found here:

https://www.meristeminfosec.com/resources/guided-ctf

If you have questions on how to prepare for the event, a Q&A session will be held on the Monday before the event at 7pm: https://meet.google.com/dfz-kksa-qzx

AGENDA
6:00 - 6:30 Setup, Food, Drinks, Networking
6:30 - 7:30ish CTF Time
7:30 - 8:00 More Networking