[0x454F4632303234] - The Meet

The holiday season is upon us, and as we wrap up another wild ride, we're tipping our hats to all of you who've made every challenge and gathering memorable. Your dedication keeps raising the bar and pushing us forward. A big shoutout to our fantastic speakers and wicked challenge creators  - you're the heart and soul of this community, bringing us together, keeping us on our toes and ready for whatever the future holds.

We've got a killer lineup for the final gathering of the year. First up, Eunice Juliana Amorim (@0xbugphant), a long-time member, steps into show us how to make LLMs our partners in crime in identifying authorization issues - you know, that type of vulnerability that's easy for humans to spot, but automating the process is a whole other beast. Get ready to embrace out-of-the-box thinking, as conventional MOs won't quite cut it with this cunning task!

Next up, for our grand finale and needing no introduction, Pedro Vilaça (@fG) will take us down the rabbit hole of the latest Flare-On 2024 Challenge #5. This advanced reverse-engineering challenge digs deep into an application's memory state by stripping it down to expose the nitty-gritty of an infamous backdoor, a few clever tricks will be employed to exploit it and achieve the challenge's ultimate goal. If reverse engineering, shellcodes, and cryptography make your heart skip a beat, and you want to master some serious clever techniques, this is the ultimate master class you can't afford to miss.

Just a friendly reminder: this is an in-person event. Before RSVPing, please double-check that you can attend and be there in person. Good logistics rely on it!

In the meantime, you can join our Slack chat (https://bit.ly/3XbyGQu) to discuss all kinds of hackish stuff and, of course, interact with other members.

Join us to close out 2024 with a bang - because nothing says "happy holidays" like breaking things.

[Goals]

Learn something new, get to know other g33ks, and, the most important thing, have fun.

[Agenda]

- "LLMs, BOLA and other Authorization Problems: a Dissertation Story" (EN/PT) by Eunice Juliana Amorim (@0xbugphant)

- "Rescuing the FLARE Intergalactic HQ with Linux forensic analysis aka 2024's Flare-On #5!" (EN/PT) by Pedro Vilaça (@fG)

[Challenge]

We have received a groovy transmission from the past! 🎶

Can you hear the flag? Ping (@SiMpS0N) when you have it. Good luck! 🎵