ØxＯＰＯＳɆＣ
2018 Events
Jan 25, 2018[0x68] - The Meet
Happy 2018 everyone!
We are delighted to tell you that we are kicking off the first meeting of the year. We’re just a few days into 2018, and epic bugs and security issues have already made the headlines. No rest for the wicked, as the saying goes, so do join us in our never-ending quest to get better at what we do and don’t miss the chance to delve into some serious hacking business in our first 2018 Meetup.
As usual, we ask you for some help with the logistics. Be sure to RSVP yes only when you are 100% sure you can attend. Thanks in advance.
In the meantime, you can join our Slack chat (https://oposec.herokuapp.com/) to discuss all kind of hackish stuff and, of course, interact with others members.
Hope to see you soon.
[Goals]
Learn something new, get to know other g33ks, build an information security community/group in the Porto area and, the most important thing, have fun.
[Agenda]
Who are you? (New participants small introduction)
- “Briareos, a Modular Framework for Elastic Intrusion Detection and Prevention” by André Baptista (PT)
- “Game of Bounties” by fisher (PT)
*Social drinks on the house 😉
[Challenge]
URL: http://89.36.210.44:32101/
Goal: Just grab the Flag! If you have a solution talk to @simps0n.
Feb 22, 2018
[0x69] - The Meet
We started the year with a bang with a great selection of skilled speakers sharing their tools and secrets of the trade. If you didn’t have the opportunity to join us, don’t miss our next gathering to delve into the strange world of InfoSec.
As usual, we ask you for some help with the logistics. Be sure to RSVP yes only when you are 100% sure you can attend. Thanks in advance.
In the meantime, you can join our Slack chat (https://oposec.herokuapp.com/) to discuss all kind of hackish stuff and, of course, interact with others members.
Hope to see you soon.
[Goals]
Learn something new, get to know other g33ks, build an information security community/group in the Porto area and, the most important thing, have fun.
[Agenda]
Who are you? (New participants small introduction)
- Cryptanalysis 101 - Breaking a password ‘hash’ (EN/PT) by João Gil (@jack64)
- The idea of a Self-sovereignty (EN/PT) by Pedro Coelho (@toipacoelho)
- Data Recovery in your basement 101 (EN/PT) by Miguel Oliveira (@drug)
- Challenge Write-up (PT) by José Sousa (@k414x)
*Social drinks on the house 😉
[Challenge]
“The machines rose from the ashes of the nuclear fire. Their war to exterminate mankind had raged for decades, but the final battle would not be fought in the future. It would be fought here, in our present. Today…”
“The resistance identified a Cyberdyne Systems old management portal. That portal is the key to get the master lock code to disable all internal AI chips of the machines. Breat into the portal and get the code. All hope for Humanity rests on your shoulders. Good luck soldier.”
URL: http://46.4.71.109
If you have a solution talk to @vibrio.
Mar 28, 2018
[0x6A] - The Meet
Feb 28, 2018
[0x71] - The Meet
With the Easter bunny just around the corner, there seems to be no better time to hunt down all those “easter eggs” in our CPUs. Be on the grid and don’t miss the chance to keep yourself updated with the latest InfoSec headlines and hot topics such as the impact of the GDPR. Spread the word and join us for our next InfoSec egg hunt.
As usual, we ask you for some help with the logistics. Be sure to RSVP yes only when you are 100% sure you can attend. Thanks in advance.
In the meantime, you can join our Slack chat (https://oposec.herokuapp.com/) to discuss all kind of hackish stuff and, of course, interact with others members.
Hope to see you soon.
[Goals]
Learn something new, get to know other g33ks, build an information security community/group in the Porto area and, the most important thing, have fun.
[Agenda]
Who are you? (New participants small introduction)
- Fuzzing the Stock market (EN/PT) by Duarte Monteiro (@d0kt0r)
- GDPR: the impact on how we develop and maintain our services (EN/PT) by Ricardo Castro
*Social drinks on the house 😉
[Challenge]
URL: http://challenge.davidepaalte.x10host.com/
If you have a solution talk to @davidepaalte (Slack).
Apr 19, 2018
[0x6B] - The Meet
Winter’s gone, and a warm sun finally awakens the earth. While fresh buds bloom and cute, fluffy animals sluggishly come out of their dens, we tend to forget the not so harmless fauna around us. Yes, you guessed it right! In our next gathering, we’ll be targeting digital bugs and worms, in particular, one species that has been in the spotlight for quite some time - Ransomware. The easy bucks trend is here to stay, and from a business perspective, it might be the stuff that nightmares are made of. Join us in our 21st Century worms dissection session and learn the inside and outs of the beasts. Do you have the guts to gut them?
As usual, we ask you for some help with the logistics. Be sure to RSVP yes only when you are 100% sure you can attend. Thanks in advance.
In the meantime, you can join our Slack chat (https://oposec.herokuapp.com/) to discuss all kind of hackish stuff and, of course, interact with others members.
Hope to see you soon.
[Goals]
Learn something new, get to know other g33ks, build an information security community/group in the Porto area and, the most important thing, have fun.
[Agenda]
Who are you? (New participants small introduction)
- Homomorphic Encryption 101 (PT) by (@ra)
- Decrypting Jobcrypter (EN/PT) by João Gil (@jack64)
*Social drinks on the house 😉
[Challenge]
Can you alert() on all three levels? https://0d.al/0x6B/ Ping (@)SiMpS0N
May 30, 2018
[0x6C] - The Meet
This year’s 5th meetup is up! Does “Completely Automated Public Turing test to tell Computers and Humans Apart” ring a bell? If not, you’re in luck. We’ll be unearthing the history behind one of the most used security features around the web. If PTH and PTT are something you like and use for your engagements, maybe you should keep tabs on the usual suspects and what they have been up to lately. Let’s just say that being the administrator is not enough. Join us, it’s time to level up the game.
As usual, we ask you for some help with the logistics. Be sure to RSVP yes only when you are 100% sure you can attend. Thanks in advance.
In the meantime, you can join our Slack chat (https://oposec.herokuapp.com/) to discuss all kind of hackish stuff and, of course, interact with others members.
Hope to see you soon.
[Goals]
Learn something new, get to know other g33ks, build an information security community/group in the Porto area and, the most important thing, have fun.
[Agenda]
Who are you? (New participants small introduction)
- Industry 4.0: why are we so interested in cyber security? by Armindo Carvalho
- Completely Automated Public Turing test to tell Computers and Humans Apart (PT/EN) by David Magalhães (@speeddragon)
- Admin rights, everyone gets Admin rights! (EN/PT) by Pedro Tarrinho (@Tarrinho)
*Social drinks on the house 😉
[Challenge]
Can you call alert() on the Ninja level? https://0d.al/0x6B/ Ping (@)SiMpS0N
Jun 28, 2018
[0x6D] - The Meet
We are proud of what we’ve achieved so far thanks to you! There’s nothing better than embarking on a journey that harnesses the best of the collective. This year’s gatherings have been a big hit. We have covered a wide range of topics and shared and learned tons of hackish stuff we can put into action in our daily lives, or at least heard something to have a good laugh about. If you didn’t have a chance to take part in this great community have no fear, we are already cooking up some goodies for all the geeks out there. Next time, we will be going down and dirty by exploring some tricks from the guys that don’t mind to share their hand in advance. Join us in our 6th meetup of this year to listen to some real insights from the world of bug bounties and Capture the Flag (CTFs) challenges. Stay tuned for more and be ready for another fun and joyful evening!
In the meantime, you can join our Slack chat (https://oposec.herokuapp.com/) to discuss all kind of hackish stuff and, of course, interact with others members.
Hope to see you soon.
[Goals]
Learn something new, get to know other g33ks, build an information security community/group in the Porto area and, the most important thing, have fun.
[Agenda]
Who are you? (New participants small introduction)
- Bug bounties and CTFs: A new approach to Information Security by André Baptista
- GSM - The wake up call by Duarte Monteiro
*Social drinks on the house 😉
[Challenge]
Announcement: It’s not what it looks like!
Get the flag and ping @simps0n.
Sep 27, 2018
[0x6E] - The Meet
Summertime is almost over. So all you half-naked people reading this on the beach need to start thinking about returning to the daily grind. Hopefully, you have fully recharged your batteries and ready to consider joining our next gathering. We are already working on some goodies to get you prepared for the cyber battlefield.
As usual, we are preparing the agenda with plenty of TLC and soon we’ll have all the details to fill you in on the 7th meetup of 2018. Here’s a taste of what’s coming up - “Bug Bounties: The other side”.
We’d also like to remind you that the Summer Challenge is still on. The clock is ticking, so try your best and don’t miss the opportunity to join the wall of fame full of ninjas, pirates, and masters.
In the meantime, you can join our Slack chat (https://oposec.herokuapp.com/) to discuss all kind of hackish stuff and, of course, interact with others members.
Hope to see you soon.
[Goals]
Learn something new, get to know other g33ks, build an information security community/group in the Porto area and, the most important thing, have fun.
[Agenda]
Who are you? (New participants small introduction)
- Designing and delivering a Bug Bounty program by João Lima (@joaolima)
- Lets play a game by Ricardo Almeida (@vibrio)
*Social drinks on the house 😉
[Challenge]
URL: http://bit.ly/0xOPOSEC-SummerChallenge
The Summer Challenge is up and running and if you didn’t try it, you should! No excuses ;)
Oct 31, 2018
[0x6F] - The Meet
October wouldn’t be complete without an 0xOPOSEC event and nothing better than to shed a light on the dark corners of the modern world before the starting your Trick-or-treating.
The 8th meetup of 2018 is on the run and hopefully, we will have one more memorable event to talk about. Stay tuned for the latest news and don’t forget to try your best on our challenge ;).
In the meantime, you can join our Slack chat (https://oposec.herokuapp.com/) to discuss all kind of hackish stuff and, of course, interact with others members.
Hope to see you soon.
[Goals]
Learn something new, get to know other g33ks, build an information security community/group in the Porto area and, the most important thing, have fun.
[Agenda]
Who are you? (New participants small introduction)
- “Controlling your neighbor’s lights - Dissecting ZigBee Protocol” by André Garrido
- “One Trick and one Treat” (Short Talk) by Renato Rodrigues
*Social drinks on the house 😉
[Challenge]
In the land of the blind, the one-eyed man is king. Just get the flag!
URL: http://peidei.me/sdr.raw
If you have a solution or need a hint ping @zezadas (Slack).
Dec 06, 2018
[0x6G] - The Overflow
Thank you for the excellent year that we had and for all the enthusiasm that all of you put on every single challenge and meetup. Looking back without a doubt we set the bar high, and we got on the next level, a special mention for all the speakers and challenges makers that made our community better and on the right track to face this brave new world.
Let us say goodbye to 2018 in style and be prepared to be fuzzed. Join us for the last meeting of the year for new tricks and cool hacks feast. Stay ahead of the game and grab a seat while you can.
In the meantime, you can join our Slack chat (https://oposec.herokuapp.com/) to discuss all kind of hackish stuff and, of course, interact with others members.
Hope to see you soon.
[Goals]
Learn something new, get to know other g33ks, build an information security community/group in the Porto area and, the most important thing, have fun.
[Agenda]
Who are you? (New participants small introduction)
- “From Crash to Win!” (EN) by Guilherme Scombatti and César Silva
- “Using supply chain attacks for software dependencies to spread malicious code in the wild.” (EN) by Preben Ver Eecke, Jelle Criel and Timothy Van Heddegem
*Social drinks on the house 😉
[Challenge]
The Ultimate Sandbox Protection
$ ssh root@13.93.38.234 -p 1337
Ping (@)SiMpS0N