@haydnjohnson @pathetiq

BSIDESLV - CTF - Red V Blue - Blue V Blue

https://twitter.com/dichotomy1 @dichotomy1 https://twitter.com/matir @matir http://prosversusjoes.net/

@haydnjohnson @pathetiq

Average users try their hand at both offensive and defensive side of computer security.

Pros get hone their skills, help others to learn.

Joes are split up into teams with a Pro Captain, given a network to defend.

PvJ - Description

Windows Linux Firewall

@haydnjohnson @pathetiq

ScoreBot● Services Up● Finding Flags● Keeping Red out● Killing beacons

● Having beacons● Losing flags● Services down

@haydnjohnson @pathetiq

1st Day

PvJ - Defend all the things!

Firewall

@haydnjohnson @pathetiq

PvJ - Defend & Attack2nd Day

@haydnjohnson @pathetiq

Day 1- Red Team let loose● Beacons● Exploits● Post exploitation (backdoor)● Taking services down

● Understand own network● Drive the firewall● Harden boxes

@haydnjohnson @pathetiq

Day 2- Blue Team let loose● Harden FASTER● Exploits● Taking services down● Removing unnecessary users● Attack team go!

@haydnjohnson @pathetiq

Red Team Benefits● Hacks● Exploits● Mentoring Blue team

○ Recon, analysis, exploit, post-exploitation○ Metasploit○ SQL Injection to Shell

● Sharpening skillz

@haydnjohnson @pathetiq

Blue Team Benefits● Hardening experience● Difficulty● Stress● WTFBBQ● Empathy for defenders