Symposium sur la sécurité des technologies de l'information et des communications

Conférence francophone sur le thème de la sécurité de l'information.
Elle se déroulera à Rennes du 2 au 4 juin 2021.

Challenge 2021 (English)

Presentation

Due to the pandemic, the SSTIC conference will be held online for the second
time. One of the main consequences is that this year, again, no tickets will be
sold. Seeing that it is not possible to make money on the work of the French
infosec community anymore and looking to buy a new Mercedes car,
the Organizing Committee decided to take action! A new DRM solution has been
developed to protect the SSTIC presentations videos, which won't be free anymore.
As an infosec community member, you can't let that happen. You have to
analyze the DRM solution in order to find a way to extract the protected content
and share it freely with the world. (or give details to the Organizing
Committee for a nice bounty).
Luckily, the OC has been compromised and it has been possible to get a capture
made during data transfer to a USB stick. Hopefully, this may allow you to find
a copy of the DRM solution and to analyze it.
Good luck!

In order to complete the challenge, you have to extract a specific video protected with the DRM solution and find an email of the form xxxxxx@challenge.sstic.org.

Once you have found this address, you have to:

Flags of the form SSTIC{...} can be found at different steps of the challenge. You can submit them at the end of the French page if you are logged in (https://www.sstic.org/2021/challenge/). It is not required to be ranked, only the final email is mandatory.

The challenge is available here: https://static.sstic.org/challenge2021/usb_capture_CO.pcapng

SHA256 : 36f3e5c98f7201ae967fd278c64b5601ecb298f37b5b7e2afcebaf3d64ef54be

No specific hardware is required to solve the challenge.

Prizes

Players can be ranked according to their rapidity of solving the challenge (rapidity ranking) or according to the quality of their write up (quality ranking). The quality ranking is based on the comprehensiveness and elegance of the solution, and the clarity of the write-up.

The prizes are:

Rankings will be available on the French page of the challenge. The winner of the quality ranking will be able to present their solution, in French, at the SSTIC conference.

Rules

Contact

Please send your questions to challenge2021@sstic.org.

Root