003 - nooode DEF CON 28 CTF Challenge w/ Guest kaptain

Youtube Video of podcast

Shownotes and Links

In this episode of CTF Radiooo adamd and Zardus host their first guest: kaptain a.k.a. Alexandros Kapravelos to discuss the DEF CON 28 CTF challenge nooode.

We discuss a bit about OOO, how kaptain got into CTFs, the design inspiration of nooode, CTF challenge philosophy, attack-defense private instances (and why they are necessary), stealth ports, how nooode went in DEF CON CTF, and lessons learned.

Links

• Play nooode on archive.ooo
• Check out the source of nooode on github
• kaptain’s work on reducing Node.js attack surface: Mininode
• Prototype pollution