🏆 The official writeup for the 2024 Defcon 32 Coin Challenge created by securinti. Congratulations to the winning teams (first blood and best writeup x 2)! In this video, we'll breakdown the solution 🧠 #DefCon #Intigriti #HackWithIntigriti #CTF #BugBounty
Writeup for Intigriti's Defcon 31 challenge coin (WeChat): https://hackmd.io/@Chivato/SkN3Piyan
Resources: https://boonepeter.github.io/posts/20... + https://boonepeter.github.io/posts/sp...
🧑💻 Sign up and start hacking right now - https://go.intigriti.com/register
🐱💻 Can't get enough of these challenges? - https://blog.intigriti.com/hackademy/...
👾 Join our Discord - https://go.intigriti.com/discord
🎙️ This show is hosted by / _cryptocat ( @_CryptoCat ) & / intigriti
👕 Do you want some Intigriti Swag? Check out https://swag.intigriti.com
0:00 Intro
0:47 Spot the vulnerability (1)
4:12 Spot the vulnerability (2)
8:33 The coin
9:46 Decoding spotify barcodes
12:27 Unwrapping the code
15:40 Getting the bar heights
18:51 Extracting the media reference
19:45 Finding hidden website (Dec2IP)
20:34 Unintended solution
21:24 First blood (and last DC31 coin)
22:17 Best writeups
25:00 Conclusion