DEF CON 29 Badge Hacking

[chapinb]

Hey all - redirected here from the discord. Looks like the USB-A port was broken during shipping. Does anyone know it it has functionality beyond joining to other badges? I am remote, so I am trying to figure out if I need to buy a soldering kit/try to learn soldering before playing with the badge.

[compukidmike]

It's only used for connecting to other badges.

[slash128]

Try this one, it should work.:
https://discord.gg/Zvd9cebRMM

Thank you!

[maroth]

Made it to the end of the challege, very fun!

Now time to start messing with the badge more

[kjcolley7]

Just published an IDA loader for the UF2 firmware format that the badge uses! Pretty basic but it works. kjcolley7/UF2-IDA-Loader: IDA file loader for UF2, created for the DEFCON 29 hardware badge (github.com)

[nukemscoops]

[nukemscoops]

Great theme this year and great choice for badge creators; MK-Factor!

[stanto]

Does anyone else have problems reprogramming the shortcut keys on their badge to the 'macros' ?

Such as [return] or [enter] ?

It's being mentioned that they end up cutting off the beginning letters, so [return] becomes eturn].

[tjjdesign]

I'm still trying to figure this out. I'm thinking I might just use the additional F-keys 12-24 that the badge can use with autohotkey or similar.

[compukidmike]

The problem is that I neglected to add those to the list of keys, sorry *cone-of-shame*
Someone will probably add them to the code when the source is released. You can use some of the other keys in the mean time.

[xanarin]

A few friends and I got together last night and RE-d the badge firmware to determine how the remote signing process works; here's a script that will sign your badge request codes with any type of badge (you can also choose whether it has the signal):
https://gist.github.com/xanarin/dfb1...1550d3fc5b1950

Warning: Spoilers for the underlying implementation of the badge request/response system

To the badge creators (if they see this), you did a great job with this implementation and we had a lot of fun digging into it! It was a lot of fun to play with and it was definitely more approachable to start analyzing the serial output than say, sniffing the USB packets between two physically connected systems. It was also nice to have the firmware downloadable online as opposed to requiring JTAG hardware to dump the chip's flash. Thanks for a sweet badge and a fun puzzle!

[compukidmike]

Thanks! Glad you enjoyed it. We wanted the comms to be obfuscated but not impossible to interpret. Reverse engineering the protocol and bending it to your will can be so rewarding.

[dmr]

stupid question I know but how the f*ck do you log in to discord? I have the username and password but there is no obvious login link!

TIA

[number6]

The usual method posted on defcon.org is to use the URL: https://discord.gg/defcon
Some of the details from DEF CON 28 Safe Mode still apply to DEF CON 29 Hybrid:
https://defcon.org/html/defcon-safem...e-discord.html

HTH

[48Y55]

I've been trying to open the source files from https://media.defcon.org/DEF%20CON%2...Defcon29.atsln with the provided software, but i just get the error:
"The project file could not be loaded. Could not find a part of the path "/Path/To/Directory/DC29/DC29.cproj"

Am i doing something wrong or is the project file yet to be uploaded?

Edit: Nvm, just found it, couldn't see the wood for the trees