DEF CON CTF 2015 Score Data Releases

We're releasing several pieces of scoring data today, ready to download and analyze as you see fit.

Finals Visualizer

We've replayed all the redemption events from DEF CON CTF 2015 Finals into this YouTube video for your viewing pleasure.

Qualifiers Data Dump

Much like our 2014 data dump, this release includes JSON dumps of categories, challenges, notices, teams, and limited user information, and more importantly, offline-browsable HTML pages about teams, challenges, and more!

Download the DEF CON CTF 2015 Qualifiers data dump from https://files.legitbs.net/statdump_2015.tar.bz2, and verify its cryptographic signature using Vito's previously-published public key.

Finals SQL Dump

Want to get exhaustive detail about scoring in DEF CON CTF finals? This Postgres 9.4.1-compatible SQL dump file is what you want.

Installation

  1. Have PostgreSQL 9.4.1 or newer installed. 9.3 or older may work but has not been tested.
  2. OPTIONAL: verify that you downloaded an official dump. More instructions below.
  3. Create a database named scorebot-2015. From the command line: createdb scorebot-2015
  4. Load the pgdump file into the database: pg_restore -d scorebot-2015 scorebot-2015.pgdump
  5. Query it: 
    > psql scorebot-2015
psql (9.4.3)
Type "help" for help.

scorebot-2014=# select id, name, dupe_ctr from teams order by name asc;
 id |             name              | dupe_ctr
----+-------------------------------+----------
  9 | !SpamAndHex                   |        0
 12 | 0daysober                     |     2289
 11 | 0ops                          |        0
  6 | 9447                          |     1549
  2 | Bushwhackers                  |        0
 10 | CORNDUMP                      |        0
  5 | DEFKOR                        |       11
 13 | Dragon Sector                 |        4
  7 | Gallopsled                    |        0
  4 | HITCON                        |        0
 15 | LC↯BC                         |        1
 16 | Legitimate Business Syndicate |        0
  1 | Plaid Parliament of Pwning    |    18441
  3 | Samurai                       |        0
 14 | Shellphish                    |        0
  8 | blue-lotus                    |        0
(16 rows)

Validating and Verifying These Dumps

Once you've downloaded the dump files, you can check its signature against Vito's public GPG key.

  1. Obtain Vito's public key from this blog, Keybase.io, or the MIT Public Key Server .
  2. Install the key in your GPG keychain.
  3. Run gpg --verify scorebot-2015.pgdump.sig. You should see output similar to: 
    > gpg --verify scorebot-2015.pgdump.sig
gpg: assuming signed data in 'scorebot-2015.pgdump'
gpg: Signature made Fri Aug 28 20:04:57 2015 EDT using RSA key ID C81CA674
gpg: Good signature from "Vito Genovese " [unknown]
gpg:                 aka "keybase.io/vito " [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 3D67 0192 A797 5173 646C  79D3 B07D 6161 43CA A77B
     Subkey fingerprint: D586 0919 7A9F 6055 BF1D  F3E9 18A0 1190 C81C A674
posted by on