RiCAN Morty Challenge

1

Flag + 10 CTF points

Morty, CAN you give me the screwdriver?

2

First 100 Happy Socks +

Flag + 30 CTF points

No Replay, even the mindblowers

3

Flag + 50 CTF points

Decrypt the portal entrance (don't worry, they are robots)

4

First 20 Google Home Mini + Flag + 100 CTF Points

Hacking the series 9000 with telepathic keys.

5

GoPro Karma Drone +

Flag + 300 CTF points

Flying Space Cruiser powered by microverse

Earn up to 490 CTF points

A RiCAN Morty Challenge @ DefCon's Car Hacking Village

August

10

-

12

,

2018

You Think You Cracked It? Come To Our Booth & Test It

Karamba Security's Challenge at DEFCON's Car Hacking Village

8

10

12am

8

12

12am

August

10

-

12

,

2018

RSVPs Closed

RiCAN Morty

Remember when RiCAN turned himself into a pickle (secretly to get out of going to family therapy)?. First, he got kicked off the table by the house cat. Then, he rolled down the sewage. Having no arms or legs he decided to take control of a cockroach's body to be able to walk out of there. Morty is in family therapy, so he can't help.

Now, RiCAN can't remember where he left the portal gun so he decides to hack into a nearby car - help him connect his brain through the OBD port to get control of the Karamba RoboCar and drive off to family therapy (he changed his mind about family therapy).

You must help him break into the CAN Bus and impersonate the Bus command messages to gain control of the vehicle's safety-critical functions - steering and braking - Once you can take control of the car you will have to show RiCAN how to drive off. In the meanwhile a few surprises are thrown at you.

FYI don't get offended if he keeps on calling you Morty.

Renowned Experts

Join us for a day of killer keynotes, presentations and networking with peers and industry leaders who are shaking up the web design game. We’ve carefully crafted an incredible lineup of presenters who are prepared to arm you with new strategies, insights and know-how to take your craft to the next level.

The price of light is less than the cost of darkness.

— jane e. doe

Speakers

Chance Three

Founder & CEO

Emilie Sunnergren

Founder & CTO

Jennie Fredrich

SVP, Media Business

Cameron Kiersh

EVP, VENICE ALE HOUSE

Onyea Trowery

CMO

Stella Moon

VP, SOUTH AMERICA

Agenda

8:00 AM - 20:00

Demo Suite Opening Hours

Light apperitives & drinks

First Station

Video Demo

You will experience cybersecurity protection from the inside of the car

Second Station

SafeCAN Demo

Our cybertech innovation team will present the SafeCAN Demo

Third Station

Carwall Demo

Our cybertech R&D team will present the Carwall Demo

Fourth Station

Meet & Greet

Meet one on one our management and R&D team

Partners

Contestant Objectives

We invite contestants to participate in our challenges, and meet the following requirements to win:

1. Inject an effective malicious message into the ROBOCAR.

What’s effective?

Seizes control of the vehicle and manipulates speed/acceleration/steering

2. Control the ROBOCAR by injecting meaningful messages

What’s meaningful?

The attack is carried out in a controlled fashion that can be reconstructed, resulting in similar behavior each time.

(You must not only take control away from us, you must be in control yourself.)

3. Prove the exploit by demonstrating on Karamba’s ROBOCAR.

Contestants either connect to Karamba’s Defcon Challenges Box or (?) and deploy their attack on the vehicle’s network.

4. Be the first to succeed.

You snooze you lose ;-)

Contestant Objectives

01

Inject a malicious message

Inject an effective malicious message into the ROBOCAR.

What’s effective?

Seizes control of the vehicle and manipulates speed/acceleration/steering

02

Control the ROBOCAR

Control the ROBOCAR by injecting meaningful messages

What’s meaningful?

The attack is carried out in a controlled fashion that can be reconstructed, resulting in similar behavior each time.

(You must not only take control away from us, you must be in control yourself.)

03

Prove the exploit

Prove the exploit by demonstrating on Karamba’s ROBOCAR.

Contestants either connect to Karamba’s Defcon Challenges Box or Prototype and deploy their attack on the vehicle’s network.

04

Be the first to succeed

You snooze, you lose ;-)

You Must meet the following requirements to win:

Inject an effective malicious message into the cyber-connected vehicle that can take over the CAN Bus

What’s effective?

The attack seizes control of the vehicle and manipulates speed, acceleration, and steering.

Control the vehicle by injecting meaningful messages.

What’s meaningful?

The attack is carried out in a controlled fashion that can be reconstructed, resulting in similar behavior each time.

(You must not only take control away from us, you must be in control yourself.)

Prove your exploit.

Connect to Karamba’s Defcon Challenges Box and deploy your attack on the vehicle’s network.

Be the first to succeed.

You snooze you lose ;-)

RiCAN Morty Build

SOFTWARE

You will be provided with a kit. The kit includes a dump file with CAN PCAP (packet capture) files that contain network packet data created during a network capture.

The kit includes all the information needed to complete the challenge.

HARDWARE

Your solutions are tested on Karamba’s cyber-connected car, through the DEFCON Challenges Box.

The Box and the cyber-connected car are connected by USB and simulate real vehicle communication via CAN. The Box serves as a remote control for the cyber-connected car, controlling the cars speed, acceleration, and steering.