Severent: Infiltrating LEMON - SecTalks SYD Ninja Night NN0x13 (19th)

We have limited in-person seating available with only 80 tickets, so secure yours early.

Thanks to you for

1. Keeping your RSVP up-to-date. We are usually overbooked and have a long waitlist. We will sign you in and keep track of RSVPs and attendance.

2. Aligning with SecTalks' no-bullshit code of conduct

3. Keeping the venue nice and tidy during and after the session

What is Ninja Night

This is a session where you show off your computer hacking skills or learn a new one. A typical evening goes like this: you join the live session, the CTF challenge is presented to all the teams, and everyone starts hacking and collaboratively solving problems in a casual and fun environment. The objective is to get as many flags as possible in 90 minutes. The first three teams will earn bragging rights, while getting the opportunity to present their way through the challenge in the next ninja night session.

Agenda

- Welcome and Introduction

- Please arrive at 6 pm promptly for an on-time start of CTF

- Player and Team Registration

- Game kick-off

- Wrap-up

Challenges

You have been tasked with infiltrating the LEMON corporation to expose the organisation's secrets. To facilitate this, you will apply to work as a Data Excellence Consultant to try and gain access to the company's internal network. This will not be easy, LEMON are famously secretive and their employee screening process is lengthy and thorough.

Be prepared

Bring along:

- A laptop with an internet connection.

- A Windows 10/11 x64 VM with the below tools installed

- Burp Suite (Community or Pro edition)

- ILSpy (or equivalent tool for .NET decompilation)

- ProcMon64.exe

A zip file with the installers for the above can be found below. Archive password is sectalks2026

https://drive.google.com/file/d/1TrZ1gCjmq3Jlb7Duv4DY_11HA2jJPz87/view?usp=sharing

Author - Matt Johnson

Matt Johnson is a Security Consultant and Red Teamer with over eight years of experience operating in highly secure environments across Europe and Australia. He is currently working as a Training Architect at SpecterOps, where he focuses on developing advanced security training.

How to find us on the day?

An organiser will be on the bottom floor until 6:15 to help attendees access the lifts.

Speed hiring

There is an opportunity for potential employers to do an impromptu 30-second description of their open role. If you are interested, speak with one of the organisers before the start of the session.

Please note the best way to support SecTalks and tell others about your open roles is through sponsorship. We encourage companies, small or large, to come forward and support their local community.

Sponsors

Atlassian - Venue Host

Google

SecDim

Notes

For sponsoring SecTalks Sydney and supporting the non-profit community, contact sydney@sectalks.org

To speak and submit CTF challenges at SecTalks, fill out https://sessionize.com/sectalks