DEFCON30 Capture the Flag: Rogues Village

This morning you got an email from a friend you hadnโ€™t heard from in a long, long time. At first you assumed they had been hacked and it was spam, but before you could delete it, you saw the garbled text in the preview and had to click through. This is what you saw:


Capture The Flag Starting E-Mail

FROM: [email protected]
SUBJECT LINE: help

MH FRY’XF WNCPLZO ZMRF KE PMGXX V JDDJA’E JORY HLMI AS BLNQZE WE FVEKS LR ZXT MCKV MVJ YQRA LOUUCY QGIQSVEMVL RYKCFLH NN. HQ OMFKO’C XCSNIJ JS J YTLXM HZC LQF’UM ZRJ BPOG TAP ERB NHX TECI NN.

T IHE GUSTMPN ZMZI F WGI DB BKFV NPO WPKI RHUW JJ STVKANLN CC ZSNN DTHPI SPWIA IHGGVXN YTHZ BNJH AQELKKN XBOHWSR HIC FVPWNMUK UQPK IDYAHQX KU VSSF WNCX KQIBD CLRPV. IY CTBP DA N EPIVVKLN ULLC UQZGNTD ZIJX UVPIUOJ FCE PQ Q YJC GJTV CV DT NNHZY LZC SS T DKT XHOFW LZK EDGSCIF KLKMJSP VA FXMGW VL PLPM.

O PTHPG BMR WQXX HOOSI ALF VLUU YKT LNIRZ WLK UJJO DHOWXIB. UCGHV’Z QTGVHV NA MCD UZWOGYSPZ CSQF’XV NBEI VOH TXPTO YQ QQMJ. UARVEB AABJ UG’V AYNJQXT HPDI XOI INLHPQC OO J WWPWI TFFA VTH EBXNY OWE L LUX’Y XPRE BULB RBELV. J XOMOT T RVGXJ IRW VDLXZFW KWF KMDKS’C UCO WQSO YB NRWP NE QD; ZLFLF MA AJUW TLXZ.

KNJMN TH FGDP JPP LF EOQU NWER-ZKZQL YLBM GSM VVYR KOH ALF CHUAFOX IJRFSH. XU TFEG YH KWA’QU AGPG BU QJG KQBT GSID YTUU BRK EOJWKGQ DNF MSEBPITUX CQ RLSCXJ XHV HKW CKX NEWCFYWG CXTTWJRN XINY RPZN CIRGJ ORXKM YQG SRAVY FAR CE VW EYZ PCQ ONIP BRRX ARF TYSPO TF DMCT’U VI.

AVX’PR BQBQ ZHQL ZMN GGLP’A IYIR-RKZFFP AY GSLI’MP SIU HZG PZ: “KRM RX VHNIY JX J NUWFTK HXAHTGMTMJ.”

GJDVP LZC, IBF’YO B PPJF BLHLD KTE R SYL BSA PSN.

PS: Sorry for the code, but can’t be too careful. Hopefully you haven’t forgotten everything we learned from Juan T. back at Tannen’s. ๐Ÿ˜‰


Answer Submission

To complete this CTF you will need three flags:

– the teamโ€™s code-phrase
– where the team is staying
– which code name was the culprit

To earn your recognition and confirm your flags go to this URL: https://forms.gle/GDHBhby8C69JJmiG7 and fill in your answers. Correct responses will be shouted out on our Twitter, @RoguesVillage.


Disclaimer

You do not need to physically enter the premises of any casinos or establishments to solve these puzzles, and if you are not attending DEFCON an alternate, digital way to turn in your answers will be available once the conference ends.


Rogues Village Twitter

Four Suits Co Twitter

Four Suits Co Instagram

Four Suits Co YouTube

Four Suits Co Website