This morning you got an email from a friend you hadn’t heard from in a long, long time. At first you assumed they had been hacked and it was spam, but before you could delete it, you saw the garbled text in the preview and had to click through. This is what you saw:
Capture The Flag Starting E-Mail
FROM: [email protected]
SUBJECT LINE: help
MH FRY’XF WNCPLZO ZMRF KE PMGXX V JDDJA’E JORY HLMI AS BLNQZE WE FVEKS LR ZXT MCKV MVJ YQRA LOUUCY QGIQSVEMVL RYKCFLH NN. HQ OMFKO’C XCSNIJ JS J YTLXM HZC LQF’UM ZRJ BPOG TAP ERB NHX TECI NN.
T IHE GUSTMPN ZMZI F WGI DB BKFV NPO WPKI RHUW JJ STVKANLN CC ZSNN DTHPI SPWIA IHGGVXN YTHZ BNJH AQELKKN XBOHWSR HIC FVPWNMUK UQPK IDYAHQX KU VSSF WNCX KQIBD CLRPV. IY CTBP DA N EPIVVKLN ULLC UQZGNTD ZIJX UVPIUOJ FCE PQ Q YJC GJTV CV DT NNHZY LZC SS T DKT XHOFW LZK EDGSCIF KLKMJSP VA FXMGW VL PLPM.
O PTHPG BMR WQXX HOOSI ALF VLUU YKT LNIRZ WLK UJJO DHOWXIB. UCGHV’Z QTGVHV NA MCD UZWOGYSPZ CSQF’XV NBEI VOH TXPTO YQ QQMJ. UARVEB AABJ UG’V AYNJQXT HPDI XOI INLHPQC OO J WWPWI TFFA VTH EBXNY OWE L LUX’Y XPRE BULB RBELV. J XOMOT T RVGXJ IRW VDLXZFW KWF KMDKS’C UCO WQSO YB NRWP NE QD; ZLFLF MA AJUW TLXZ.
KNJMN TH FGDP JPP LF EOQU NWER-ZKZQL YLBM GSM VVYR KOH ALF CHUAFOX IJRFSH. XU TFEG YH KWA’QU AGPG BU QJG KQBT GSID YTUU BRK EOJWKGQ DNF MSEBPITUX CQ RLSCXJ XHV HKW CKX NEWCFYWG CXTTWJRN XINY RPZN CIRGJ ORXKM YQG SRAVY FAR CE VW EYZ PCQ ONIP BRRX ARF TYSPO TF DMCT’U VI.
AVX’PR BQBQ ZHQL ZMN GGLP’A IYIR-RKZFFP AY GSLI’MP SIU HZG PZ: “KRM RX VHNIY JX J NUWFTK HXAHTGMTMJ.”
GJDVP LZC, IBF’YO B PPJF BLHLD KTE R SYL BSA PSN.
PS: Sorry for the code, but can’t be too careful. Hopefully you haven’t forgotten everything we learned from Juan T. back at Tannen’s. 😉
To complete this CTF you will need three flags:
– the team’s code-phrase
– where the team is staying
– which code name was the culprit
To earn your recognition and confirm your flags go to this URL: https://forms.gle/GDHBhby8C69JJmiG7 and fill in your answers. Correct responses will be shouted out on our Twitter, @RoguesVillage.
You do not need to physically enter the premises of any casinos or establishments to solve these puzzles, and if you are not attending DEFCON an alternate, digital way to turn in your answers will be available once the conference ends.