DEFCON BADGES 2019 FULL
DEFCON BADGES 2019 PORTABLE

A badge can then submit logs within the Blue Team Village for upload directly to, a custom dashboard built specifically for the Blue Team Village. Running the agent allows for a large number of low to medium interaction honeypots. HoneyDB is a community driven honeypot sensor data collection and aggregation service. We’ve also added the HoneyDB agent on the badge. When attempting to run a semi well-known ICS honeypot on the badge, it crashed anytime it was hit with a port scan. There is simple scoring, with points awarded when a client connects to the AP, and then to each of the services.

DEFCON BADGES 2019 FULL

There is an SSH honeypot with full session replay right on the badge’s display. When enabled, the badge will broadcast an open Wi-Fi AP and serve as a captive portal, funneling all traffic through the badge for connected clients. But, what fun can be had without taking a risk? Features WiFi Access Point, Honeypots and HoneyDB This is not enabled by default, but must be turned on by the badge user as there are obvious risks.

DEFCON BADGES 2019 PORTABLE

This badge is somewhat of a throwback to those days, providing a portable WIFI honeypot as a target in which badge holders score points based on the number of attackers enticed to connect to the badge and services. Having personally attended DEF CON for now 20 years, much of the wild-west early days are long gone. Thus, after a painstakingly large number of prototypes and revisions, the device slowly became more portable and evolved into a single PCB with screen, quite suitable for an electronic badge. However, it wasn’t quite as portable as a wearable electronic conference badge. At this point, the devices had two modes, protected AP mode and honeypot mode. However, we were not very far away from adding honeypot functionality, so that was implemented on the plane ride on the way over to DEF CON 26, as is tradition. untrusted, hotel, airport, etc) environment. The goal was to serve as an AP that would provide VPN access to connected hosts while in a “hostile” (i.e. The idea for this badge started just before DEF CON 26, when I turned a small Linux based computer into a portable WIFI AP, with always-on VPN, network-wide ad blocking and an LCD screen for simple configuration. However, it will be updated with additional information as we get closer to the conference. This page will be vague at times, as things are still in development and also to leave a few surprises for those who obtain a badge. The irony is not lost that while my focus most of this century has been on the offensive side of security, that this project has resulted in the official badge for the. This is a short history and overview of the badge, which has been in the works for the better part of a year. I decided to deviate a bit from our usual offensive security focus, have a little fun and build a mobile AP and honeypot which has now evolved to the DEF CON 27 Blue Team Village badge.

With the wave of low-cost PCBs and components, electronic conference badges are now pervasive. Visit Part 2 of 2 for spoilers and behind the scenes info.

Defcon badges 2019