Showing posts from May, 2018

CryptoToken Challenge by Trimarc Security at ShmooCon 2018

I'm patiently waiting for the 2018 Defcon IoT CTF and thought I'd stay in the habit of blogging by revisiting the CryptoToken challenge that  @TrimarcSecurity  held at ShmooCon 2018. CryptoTokens and Challenge Coin The challenge was meant to be fun, easy, and get you to talk with vendors. The way it worked was that once you solved the first challenge, you had to find the vendor that had the second challenge, then the third, and so on obtaining a new CryptoToken with each solve. The prize for solving all of the puzzles was a challenge coin and a shirt. I'm a sucker for a challenge coins, so  @PLeXuSECU  and I grabbed the first token and got to work. First Token We immediately recognized the Letter Number cipher and solved this one by hand. Had cell service been a little stronger in the Hilton's basement, we might have used Rumkin's Letter Number Solver found  here .        Letter Number: 19-23-15-18-4-6-9-19-8 (SWORDFISH) At this point we were