ChaosVPN for Playing CTFs
Chaos Computer Club explores chaosvpn for playing ctfs at DEF CON 18, examining malware-analysis and practical defenses.
Summary
Architecture and Background
ChaosVPN - the American name is AgoraLink - is a tinc based, fully meshed VPN to connect hackerspaces and other hacker related networks for fun, sharing, learning and competition with each other. Its purpose is to provide a trusted, private and secure network with high bandwidth, low latency, without single points of failure. The first intended usage of the network was VoIP, but it has become used for lots of different purposes - whatever works on IPv4 and/or IPv6 works on ChaosVPN.
Vulnerability Analysis
This includes our own root zone .hack. Most major Hackerspaces in Europe and America are now connected via the ChaosVPN. To play CTF contests we decided to build a separate incarnation of this network called warzone.
Exploitation and Demonstrations
This network is to compete, play and learn in an isolated environment without harming anyone. We host CTF hacking contests and challenges on the network. Critical thinking, source code analysis, reverse engineering and a good understanding of networks are the abilities honed in this environment.
Remediation and Defensive Strategies
The talk will show the direction ChaosVPN / AgoraLink took and explain some decision points. We will show how it is built, what it does and how to integrate it in your hacker gathering space. And then we will show how this network can be used to play CTF Games and have some fun. Full bio available here: For copies of the slides and additional materials please see the DEF CON 18 Archive here:
Related talks
Main Stage·49 min
Jon McCoy
Jon McCoy explores hacking .net applications: the black arts at DEF CON 19, examining malware-analysis and practical defenses.
Main Stage·49 min
Lineberry · Richardson · and Wyatt
Lineberry and Richardson details anthony Lineberry, David Luke Richardson & Tim Wyatt - These Aren't the Permissions You're Looking For The rise of the robot revolution is among us.
Main Stage·28 min
Jeremy Brown
Jeremy Brown - Exploiting SCADA Systems SCADA systems are just as vulnerable to attack today than they were ten years ago.


