Do you know the easiest way to show your individuality and positive spirit? Surely with clothes! Everyone could demonstrate his or her creativity and add visual appeal to the event. The competition lasted for two days. T-shirts, so necessary for the contest, were to be purchased, decorated and put on by the participants on their own :)
Alexey Sintsov from DsecRG took the first prize of this peculiar contest.
It is noteworthy that last year Denis Baranov from Positive Technologies presented a similar T-shirt (depicting the XXS vulnerability on the conference website) at ZeroNights 2011. So the score is 1:1 ;)
And there is an excellent write-up [ru] about the forum in Alexey's blog.
Any attendee who had reached the age of 18 was welcome to participate in the competition. All software and hardware required for the competition were to be brought by the participants themselves.
The attacked web application contained a limited number of vulnerabilities, consecutive exploitation of which allowed OS command execution. The whole competition took 30 minutes, and every 5 minutes the competitors whose actions caused a more frequent WAF reaction had to drink 50 g of tequila to proceed with the competition.
The winner was to be the first who would manage to capture the principal game flag on the stage of executing OS commands on the server. If the principal flag was not captured the winner would be the participant with the largest number of flags captured on other stages of exploiting the vulnerabilities. Vladimir Vorontsov from ONsec took the first place as the year before.
By the way, Vladimir published an excellent report on PHDays 2012 describing his victory in Too Drunk to Hack NG in his blog [ru].
The winners received prizes and gifts [video]. Congratulations once again!