Lightnews — Scholar-powered news

LightNews

Zardus

@zardus.bsky.social

240 followers 1 following 120 posts

Retired DEFCON CTF org. Shellphish Captain Emeritus. ASU Prof. angr hacker. pwn.college sensei. Looking for students/interns! https://yancomm.net https://github.com/zardus https://defcon.social/@Zardus

Posts Media Videos Starter Packs

Zardus @zardus.bsky.social · Aug 10

The room is FULL for @the_robwaz’s talk about Speculative Execution and micro architectural vulnerabilities at @DEFCON Academy (but I only photographed the man himself)!

Zardus @zardus.bsky.social · Aug 10

Spread the word! @DEFCON’s brand new @DEFCONAcademy is giving out shirts, coins, and stickers! And also KNOWLEDGE! So tell your friends (including you, @DEFCON account!) and come by room 235 today to LEARN TO HACK and GET SOME SWAG!

Zardus @zardus.bsky.social · Aug 9

The @the_robwaz is setting up for his @DEFCONAcademy talk on Race Conditions at 1pm in room 235! At @DEFCON? Come learn about concurrency errors in software!

Zardus @zardus.bsky.social · Aug 9

Hello Hackers! Earned a @pwncollege belt? Other amazing achievements? Hanging out @DEFCON? Come by @DEFCONAcademy and get belted at 5pm!

Zardus @zardus.bsky.social · Aug 9

Hello Hackers! Come to @DEFCON Academy (room 235) for a live episode of our pwn.talk starting NOW!

Zardus @zardus.bsky.social · Aug 8

Standing room only at @x3ero0’s @DEFCON Academy talk about Getting into CTF!

Zardus @zardus.bsky.social · Aug 8

Come to @DEFCON Academy to see @TheWyrmSuperior talk about buffer overflows, starting in two minutes!

Zardus @zardus.bsky.social · Aug 8

We are going full speed in @DEFCON's @DEFCONAcademy! Two talks down (Intro to Linux and Intro to Assembly), with the next talk (Intro to Buffer Overflows) at 3pm. Meanwhile, learners are learning through hands-on challenges between the talks. Come by and LEARN TO HACK in W235!

Zardus @zardus.bsky.social · Aug 8

Me waiting for the @DARPA AI Cyber Challenge result announcement after having interviewed all the teams:

Zardus @zardus.bsky.social · Aug 8

@DEFCONAcademy is a big effort, brought to you by dozens of people. I'll call them out on this thread throughout the weekend, but why wait? Come meet them in person and pick up some skills!

Zardus @zardus.bsky.social · Aug 8

Best of all? You might get to meet @the_robwaz, to whose effort we owe this year's @DEFCONAcademy. Robert has spent months working tirelessly to make sure everything goes smoothly, and will be standing by to oversee and guide. Don't miss this opportunity to learn from the best!

Zardus @zardus.bsky.social · Aug 8

Need more motivation? We have swag and awards! Come early, and we'll have stickers. Solve enough challenges, and we'll give you a limited-edition challenge coin, a pwn shirt, or, for the true high achievers, a belt to induct you into the martial art of hacking. All at Room 235!

Zardus @zardus.bsky.social · Aug 8

@DEFCONAcademy is approachable to all, regardless of skill level or equipment. We have laptops for you to use, our material ranges from "how to Linux" to "how to exploit microarchitectural vulnerabilities in CPUs" to much in between, all, again, with mentor support! COME LEARN!

Zardus @zardus.bsky.social · Aug 8

We've spent the intervening year preparing a whole weekend of talks, demos, fascinating material, and dozens of mentors standing by to help you learn through hundreds of hands-on challenges. Check out the schedule (defcon.pwn.college/) and come to Room 235 to learn!

Zardus @zardus.bsky.social · Aug 8

Learning impediments abound, from a lack of resources to a lack of mentorship. Last year, @thedarktangent, @perribus, @adamdoupe, @the_robwaz, @theconnornelson, and I announced @DEFCONAcademy, an effort to bridge these impediments for the community (defcon.social/deck/@...).

Zardus: "Hello hackers! In case you missed it at @defcon: …" - DEF CON Social

Hello hackers! In case you missed it at @defcon: @perribus, @adamdoupe, @the_robwaz, @TheConnorNelson, @thedarktangent and I announced @DEFCONAcademy! I kept meaning to spread the word, and now that there's hype (https://news.asu.edu/20241031-science-and-technology-def-con-academy-looks-serve-build-community), it's time for the thread! Read on! 🧵

Zardus @zardus.bsky.social · Aug 8

This is my 25th year attending @DEFCON, in roles ranging from wandering the halls as a newbie to competing in village competitions to competing in and then running the DEF CON CTF itself. I've watched many people become a bit less noob alongside me, and... it's not easy!

Zardus @zardus.bsky.social · Aug 8

Hello hackers! Excited for @DEFCON tomorrow? Make sure to stop by @DEFCONAcademy, a brand new community effort to provide a path for everyone to LEARN TO HACK. Read on for the details! 🧵

Zardus @zardus.bsky.social · May 13

That was a longer thread than expected, but we're super excited about these next steps in CTF Academy! Stay tuned for more exciting stuff in the future and, if you want a non-microblogging place to stay up to date, keep an eye on ctf.asu.edu/educatio...

Zardus @zardus.bsky.social · May 13

Want to see your education platform feeding into CTFs as well? If you run an educational platform that you think is a great bridge to CTF Academy, let us know!

Zardus @zardus.bsky.social · May 13

An amazing cryptography education resource is cryptohack.org. These hackers, too, would be amazing to help ramp into CTF and the real world. Now, once you reach Level 15 there, you're welcome to join us at CTF Academy by filling out this form! docs.google.com/form...

Zardus @zardus.bsky.social · May 13

On to the Platforms! pwn.college has good (and growing!) content in various security concepts, but shines most in binary exploitation. Other sites (I maintain a list at https://wargame.nexus) have other specialties, so including their top hackers would be great!

Zardus @zardus.bsky.social · May 13

pwn.college Green Belts learn ROP, Heap, kernel security, and even microarch concepts, so we're inviting Green (and, pending capacity, earlier) Belts to CTF Academy! We expect this will help Green Belts solidify their skills without adding too much CTF mentor load.

Zardus @zardus.bsky.social · May 13

This has worked quite well! Rather than explaining Heap Exploitation, the mentors could focus on, e.g., tricky heap massaging in complex applications, or just how to approach a complex challenge in general. In fact, it's worked well enough that we're relaxing the requirements!

Zardus @zardus.bsky.social · May 13

Next, we're scaling hacker skill levels! So far, we limited CTF Academy to hackers who completed the Blue Belt (Advanced Exploitation) material on pwn.college, so that mentors would not be overloaded with introductory technical mentoring, saving mentoring capacity.

Zardus @zardus.bsky.social · May 13

On the mentor side, we're scaling this out to more teams! If you're an established CTF team that is interested in taking a turn in the mentor rotation, we'd love to have you on board! Check out more info and a sign up form here: docs.google.com/form...

CTF Academy - Call for Mentors

CTF Academy is an initiative to help pwn.college students transition from self-paced training to real-world CTF competitions. We invite experienced CTF teams to mentor students during live CTFs. Mentors guide students through challenges, answer technical questions, and help them experience the thrill of competing on the leaderboard. By joining CTF Academy as a mentor, you get to shape the next generation of CTF players and potentially discover future teammates. For more information visit CTF Academy

docs.google.com