DEFCON 24: The Bender Badge

The Bender Badge, in my humble opinion, was the most sought after electronic badge of DEFCON 24. No it is not the official DEFCON 24 Badge, but the most excellent creation of AND!XOR.  If you are on Twitter and didn't know this was going down... you better get on with your Twitter game! Here's another word you should learn - HACKADAY.

I will not bore you with the story on how I got my hands on one, but let's just say, I have the most amazing buddies at DEFCON! Just like the MI-6 Quartermaster in James Bond --> "Q" DEFCON badges seem to just magically appear around his neck, badge procurement an expert he is! And of course, everyones information source at PHV --> "Siri" Just ask Siri, and she'll point your radar to the right direction.  Most excellent indeed.

Here's a list of stuff you can do with it... Plug your Bender Badge to the USB port on your Kali box.   From the Main Menu you'll see the following:
1. Bling
2. Chat
3. Games
4. Peers
5. System

*Minicom 2.7

Serial Connection to the Bender Badge
1. Pick "System", then scroll down to "Serial Mode"
2. Fire up your Terminal and type the following - "sudo minicom -s"
3. You will be presented with a menu, select "Serial port setup"
4. On the next menu, by the "Change which setting?" prompt. Pick "A" for "Serial Device:.
5. Change the entry from "/dev/ttyUSB0" to "/dev/ttyACM0" (that's a zero)
6. Save & Exit

The Bender interface should come up at this time.

WIFISH 2016 - No Hacking Required.

There I said it. There was no hacking required. Just plain old smarts and creativity were all you needed to get through all 3 challenges, ultimately finding and 0wning all the WiFi Sheep Hunt Access Points.  I know, I know... "WTF are you talking about? This is DEFCON, we are supposed to hack!!" Now, now kids... sometimes the simplest solutions work the best. let's get started from the beginning.

To start with, it is essential that you always have the correct gear and resources for whatever activity it is you're planning to do. If you're going to the beach, you prep your beach stuff. If you're hitting the gym you'll prep your oly shoes, lifting belt, wrist wraps...etc. Your daily ruck/bag/purse always have your essentials -  cell phone, battery pack, cables, wifi pineapple, swiss army knife, cash, paracord,...etc. 

Then there is prepping "to go to DEFCON", and there is prepping for "a contest in DEFCON".  The regular DEFCON prepping, like getting a burner phone and a burner laptop is all good, but it is not enough be competitive.  Additional gear or software are required if you want to do well in any contest you decide to play.  

In addition to your gear, months of practice and research will go a long way.  For WIFISH, being a wireless challenge presents a lot of protocol you might encounter, so you'll have to prep for basically everything wireless - bluetooth, infrared, NFC, WiFi, RF (ham radio).  You won't know what you will be presented with until the day of the challenge.

For this year, we had 3 challenges...  RF, NFC and WIFI.

The most ideal gear to have for the challenges are as follows.

RF - a ham radio, and a directional fox hunting gear.

NFC - an Android device with an NFC tag reader app, or better yet a ProxMark II

WIFI - Kali laptop and Aircrack.

<unfinished blog post>

Wi-Fi SHEEP HUNT 2016 Official Contest Brief