Medileak 2024

Table of Contents

Description #

As part of the event “The first professional cybersecurity meetings”, the city of Limoges organized an OSINT CTF on the theme of false medicine practices and their risks.

Conceived and run by YPSI SAS, this CTF brought together over 110 teams competing over 2 weeks online.

The specificity of this CTF was not its difficulty, but rather the precision required.

Each error in submitting a flag had an impact on the final score. There were no speed bonuses, so the aim was to take your time and make sure you validated the right flags.

Qualifying phase #

My team: “SCCM WIzards” managed to complete all the challenges in the qualifying phase. We made 8 mistakes out of more than 40 challenges, which put us in 20th place.

4 teams were selected in this qualifying phase:

These 4 teams travelled physically to the Limoges technopole to compete phyin the final.

Final results #

Congratulations to the podium teams:

🥇 Dodo Pizza
🥈 Tacosint
🥉 WAFU and PredictaLab ex-aequo

Small final #

The qualifying phase stopped in the middle of the survey, and the final allowed to finish it.

Once the final was over, the organizers opened the “small final”, accessible only to teams who had completed all the challenges in the qualifying phase.

The aim of the small final was to allow these teams to finish the survey and continue the competition.

We took part in the small final and finished in 4th place!

🏆 This puts us in 8th place in the final ranking.

Write-up #

Team Dodo Pizza write-up (1st place)
Team Tonton flagueurs write-up (14th place)
Official organizers’ write-up

Acknowledgements #

Many thanks to the 🦏 Oscar Zulu team for their excellent work in creating the CTF. Thanks also to Limoges Métropole for this great initiative that encourages cybersecurity and innovation.

→ We look forward to the next edition of Medileak!"