ChiBrrCon 2027

Orientation and onboarding for the "CPAI: Cympire Red Team Village" starting at 10:15

Preregistration for the village is required, sign up for the actual CTF session (not this orientation) by adding to your schedule, seats are limited!

CPAI: Cympire Red Team Village

You should register in advance for this session by adding it to your personal schedule, for best experience, and because seats are limited!
(Click this link to see how to add a session to your personal schedule)

Audience:

• High School Cybersecurity Students
• Entry-Level Cybersecurity Students
• Novice Penetration Testers

Overview
This village is designed for beginners with little to no prior experience in Red Team operations who possess a foundational understanding of cybersecurity principles. It is ideal for learners seeking to build practical Red Team skills through interactive, hands-on keyboard exercises that utilize real-world tools and vulnerabilities.
Participants assume the role of a penetration testing team conducting a covert engagement against a fictitious organization. Through this scenario-based approach, learners perform open-source intelligence (OSINT) research on real-world vulnerabilities and apply exploitation techniques within a controlled lab environment featuring both Linux and Windows operating systems.


Guided instruction is provided throughout the village, with an experienced instructor available to support participants at each stage of the learning process. This ensures the development of both technical proficiency and operational confidence.
 
Key Topics Covered

• Discovery
• Reconnaissance
• Initial Access
• Privilege Escalation
• Collection
• Impact
• File Analysis
• Application Security
• Identity and Access Management (IAM)
• Vulnerability Assessment
• Malware Analysis

 
Technical Requirements
Workstation Requirements

1. Google Chrome browser with Remote Desktop Protocol (RDP) support
2. Supported operating systems: Windows, Linux, or macOS
3. Chromebooks, tablets, and mobile phones are not supported
4. Participants using systems with restrictive security configurations (e.g., Endpoint Detection and Response [EDR] solutions) are advised to temporarily disable these features, as they may interfere with lab activities
5. When possible, participants are encouraged to use personal laptops to avoid organizational security restrictions

Network Requirements

1. A minimum of 3 Mbps of internet bandwidth per participant
2. No firewall restrictions that block required ports or IP addresses
3. Preferred network access configuration:
   • Whitelist *.cywaria.net/ and ensure access to port 8443
   • An unrestricted internet connection with no port or IP filtering is ideal
   • If feasible, participants are encouraged to bring or use personal mobile hotspots

The Tinfoil-Hat Competition is coming to ChiBrrCon!!

It's going to be an absolute blast, and we're looking forward to all the crazy and creative hats everyone is going to build!

Checkout the Tin Foil Hat Competition site for the rules of the competition!

The Tinfoil Hat Competition is a unique event that tests the signal attenuation properties of contestant-made tinfoil hats. Using professional RF testing equipment, we measure how effectively your hat blocks various radio frequencies.

How It Works
1. Create Your Hat
Design and build your tinfoil hat using any materials you choose. Be creative and innovative in your approach to RF shielding!

2. Test the Hat
You place your hat on our handy test dummy, and the hat will be tested using a HackRF One device, measuring signal attenuation from 1 MHz to 6 GHz.

3. Results & Scoring
We compare signal strength with and without the hat, calculating average attenuation in decibels (dB). The highest attenuation score in each category wins!

An Interactive Lock Village Experience
AI can process vast amounts of data, recognize patterns, and automate decisions—but it still can’t feel a binding pin, sense subtle feedback through a tension wrench, or adjust instinctively when a lock fights back.
This session is not a traditional talk. Instead, attendees are invited into a hands-on Lock Village where physical security takes center stage. Using a variety of locks—including pin tumbler, wafer locks, and clear training mechanisms—participants will explore the tactile skills behind lock-picking and learn how small, human-driven actions can defeat seemingly secure systems.
Through live demonstrations and guided practice, this experience highlights why certain aspects of security remain stubbornly resistant to automation. Attendees will gain a deeper appreciation for physical security, and the importance of understanding vulnerabilities that exist beyond code, models, and dashboards.
No slides. No algorithms. Just locks, picks, patience, and the unmistakable click that only a human can feel.