cyber pubquiz

OOO 2022

NO PHONES!

THERE WILL BE CONSEQUENCES

1. nerdy stuff
2. Logos
3. flags

4. OSINT
5. MUSIC

Ronde 1: Nerdy stuff

STUFF YOU SHOULD KNOW
(srry strategy)

To what does this evaluate?
Ps. its javascript <3)

// Do not use in production!!1!
console.log('4' + 1);
console.log('4' - 1);

1 Too EEEEASY
How about this one?

mov rax, 0
mov rdx, 1
mov rcx, 8
loop:
	xchg rax, rdx
	add rax, rdx
	loop .loop

2 What does it DO?

What does this print on line 5?
Pliz tell me you got that this is python

python3
>>> # Time for some real code
>>> range(10)
>>> [i + 1 for i in _]
>>> print(_[0]+_[-1])

3 Serious questions

At the start of December 2021 a vulnerability affected many software applications world wide. Our Deloitte team lost many hours of sleep over this between Christmas and New Years, what is the name of this vulnerability?

4

Hackerconferences

The Netherlands also has a famous hacker conference. The edition of 2022 was named MCH2022. Deloitte had a very cool presence during the event, what was the name of the village we hosted?

5

Be careful out there

Spyware developed by the Israeli cyber-arms company NSO Group that can be covertly installed on mobile phones, they targeted journalist and protestors against opressive regimes. What is the name of the tool they developed?

6 Web programming

Every year programming languages come and go. Some are useful, some are less useful (let's not divide the crowd here). The infamous language PHP conquered the world of webpage building. What does PHP stand for?

7

certificeringen

CEH, GIAC, CISA, CISM, OSCP, CREST, MEH, CPTE, CISSP, CPTC. There are so many certifications varying from usesful to less useful (again let's not divide the crowd). One of the most famous certificates might be OSCP certification where you need to hack 6 machines within 24 hours. Which company offers this certification?

8

BONUS: Welke certificering bestaat niet? (0.5p)

blockchain!1!!

Bitcoin is the founding father of blockchain technology as cryptocurrencies. Bitcoin uses a block generation time of 10 minutes (meaning on average every 10 minutes a new block will be found). What is the block generation time of Ethereum?

Bonus: How are non-accepted blocks called in Ethereum where miners do get rewarded for if those are included in the accepted block? (0.5p)

9

supply chain attack

Solarwinds software Orion caused worldwide panic with a big supply chain attack (also looking at you Kaseya, Microsoft, MEDoc). Governmental entities in the US, UK, Germany and Canada are hacked and also big corporates such as Microsoft. What is the name of the company that first breaked the news about Solarwinds.