diff --git a/_posts/2026-07-15-supply-chain-attack.md b/_posts/2026-07-15-supply-chain-attack.md new file mode 100644 index 0000000..204a917 --- /dev/null +++ b/_posts/2026-07-15-supply-chain-attack.md @@ -0,0 +1,164 @@ +--- +# Editing the below variables is the absolute minimum to get stuff up. Feel +# free [obliged] to add editorial niceties or strip the page if you need to +# include something more complex. +season: 23 +episode: 03 +layout: default +title: Supply Chain Attack using CI/CD Pipeline +# summary for social media cards. Ideal length 55 chars, max 200 +summary: Northsec 2026 - Supply Chain Attack using CI/CD Pipeline +tags: northsec supply chain ci cd +date_fr: 2026-07-15 +date_long_fr: Mercredi le 15 juillet 2026 18:00 à 21:00 +date_en: 2026-07-15 +date_long_en: Wednesday July 15th 2026 18:00 to 21:00 +description_fr: > + Lors du CTF NorthSec 2026, j'ai créé une épreuve qui exploitait un pipeline CI/CD vulnérable afin de réaliser une attaque de la chaîne d'approvisionnement (supply chain attack). +description_en: > + During Northsec CTF 2026, I made a challenge that was using a vulnerable CI/CD pipeline to perform a supply chain attack. +tools_fr: + - Un compte RingZer0 pour Spawn2Pwn + - git +tools_en: + - A RingZer0 account setup for Spawn2Pwn in order to start the track. + - git +presented_by_fr: Défi présenté par Jean-François Blain (Junior_n30) & Philippe Dugré (zer0x64) +presented_by_en: Presented by Jean-François Blain (Junior_n30) & Philippe Dugré (zer0x64) +featured_img: /images/2026-07.png +featured_img_alt: Monsatan defacing banner +location: CyberEco (355 Rue Peel Suites 203-208, Montréal, QC H3C 2G9) +--- + +# Next edition: {{ page.date_en }} +[French version](#french) + +### Season {{ page.season }} Episode {{ page.episode }} + +## {{ page.title }} + +The next edition of Montrehack will be held on {{ page.date_long_en }}. + +![ {{ page.featured_img_alt }} ]( {{ page.featured_img }}#centered) + +{{ page.description_en }} + +{% if page.challenge_assets %} +{::options parse_block_html="true" /} +
+## Challenge Assets +{% for asset in page.challenge_assets %} +* [ {{ asset.name }} ]({{ asset.url }}) +{% endfor %} +
+{% endif %} + +{% if page.archived_assets %} +{::options parse_block_html="true" /} +
+## Archives +This edition is over. Here are the archived assets: +{% for asset in page.archived_assets %} +* [ {{ asset.name }} ]({{ asset.url }}) +{% endfor %} +
+{% endif %} + +## Tools and Experience Required + +{% for tool in page.tools_en %} +* {{ tool }} +{% endfor %} + +## Where + + +* {{ page.location }} +* Follow the presentation [online on Twitch](https://twitch.tv/montrehack/) +* Participate in teams or on your own [on Discord](https://discord.gg/4qfFwPX) + +## When + +{{ page.date_long_en | capitalize }} + +## How + +* Workshop style +* Bring your own laptop +* Challenges will be analyzed +* Small groups of people can work on each challenge +* Solutions to each challenge will be presented to everyone at the end of the event + +## Credits + +{{ page.presented_by_en }} + + + +# Prochaine édition: {{ page.date_fr }} + +### Saison {{ page.season }} épisode {{ page.episode }} + +## {{ page.title }} + +La prochaine édition de Montréhack aura lieu {{ page.date_long_fr }}. + +![ {{ page.featured_img_alt }}]( {{ page.featured_img }}#centered) + +{{ page.description_fr }} + +{% if page.challenge_assets %} +{::options parse_block_html="true" /} +
+## Challenge Assets +{% for asset in page.challenge_assets %} +* [ {{ asset.name }} ]({{ asset.url }}) +{% endfor %} +
+{% endif %} + +{% if page.archived_assets %} +{::options parse_block_html="true" /} +
+## Les Archives +Cette édition est terminé, voici les archives: +{% for asset in page.archived_assets %} +* [ {{ asset.name }} ]({{ asset.url }}) +{% endfor %} +
+{% endif %} + +## Outils et expérience requis + +{% for tool in page.tools_fr %} +* {{ tool }} +{% endfor %} + +## Où + +* {{ page.location }} +* Suivez la présentation [en ligne sur Twitch](https://twitch.tv/montrehack/) +* Participez seul ou en équipe [sur Discord](https://discord.gg/4qfFwPX) + +## Quand + +{{ page.date_long_fr | capitalize]] + +## Comment + +* Formule atelier +* Apportez votre ordinateur portable +* Des problèmes seront étudiés et expliqués +* Chaque problème sera analysé en petits groupes +* Les solutions seront présentées avec tout le monde à la fin de la rencontre + +## Remerciements + +{{ page.presented_by_fr }} + +
+### Sponsors // Partenaires + +[![NorthSec](/images/nsec_logo.png)](https://nsec.io/) + +Interested to sponsor or present a challenge? [Contact us here](https://docs.google.com/forms/d/e/1FAIpQLSecc0vfe3pIwMJjIBCYW4G43ZwtagwVESu_qHKnglnBc3R3ww/viewform?usp=sf_link). \ No newline at end of file diff --git a/images/2026-07.png b/images/2026-07.png new file mode 100644 index 0000000..70f93a4 Binary files /dev/null and b/images/2026-07.png differ