Welcome to the 2018 Bad Santa Challenge!

Each year I host an annual party for my local Sacramento Cyber Security friends that is a mixture of CtF, Scavenger hunt, and a little RPG. There are challenges for the 1337’s as well as the n00bs. It is very much a team adventure so no one person or skill set can solve it. Instead "the party" needs to work together. There are challenges for all skill levels, and those that are finding it easy are encouraged to pause and help those struggling. I will be providing snacks, dinner and drinks. All you need to bring is a laptop and network cable. It is a great way to hang out with the local cyber security community.

If you’re a seasoned security person bring your web hacking tools. If you're new to web hacking I'd encourage you to install OWASP ZAP as a starter and I will be providing coaching and instruction as you go along.

Helpful links:

  • BadSanta.org
  • https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project
  • https://twitter.com/BadSant47822487

Please feel free to bring a guest if you have someone who would like to participate.

For those who are curious, the name "Bad Santa" dates back some 15 years when I first started. The only public domain clip art I could find of Santa was the one attached of his unshaven and smoking a cigar. All these years later the name and logo have stuck :)

Message @BadSant47822487 on Twitter  for details.