added july event

_posts/2026-07-15-supply-chain-attack.md

@@ -0,0 +1,164 @@
+---
+# Editing the below variables is the absolute minimum to get stuff up. Feel
+# free [obliged] to add editorial niceties or strip the page if you need to
+# include something more complex.
+season: 23
+episode: 03
+layout: default
+title: Supply Chain Attack using CI/CD Pipeline
+# summary for social media cards. Ideal length 55 chars, max 200
+summary: Northsec 2026 - Supply Chain Attack using CI/CD Pipeline
+tags: northsec supply chain ci cd
+date_fr: 2026-07-15
+date_long_fr: Mercredi le 15 juillet 2026 18:00 à 21:00
+date_en: 2026-07-15
+date_long_en: Wednesday July 15th 2026 18:00 to 21:00
+description_fr: >
+   Lors du CTF NorthSec 2026, j'ai créé une épreuve qui exploitait un pipeline CI/CD vulnérable afin de réaliser une attaque de la chaîne d'approvisionnement (supply chain attack).
+description_en: >
+   During Northsec CTF 2026, I made a challenge that was using a vulnerable CI/CD pipeline to perform a supply chain attack.
+tools_fr:
+  - Un compte RingZer0 pour Spawn2Pwn
+  - git
+tools_en:
+  - A RingZer0 account setup for Spawn2Pwn in order to start the track.
+  - git
+presented_by_fr: Défi présenté par Jean-François Blain (Junior_n30) & Philippe Dugré (zer0x64)
+presented_by_en: Presented by Jean-François Blain (Junior_n30) & Philippe Dugré (zer0x64)
+featured_img: /images/2026-07.png
+featured_img_alt: Monsatan defacing banner
+location: CyberEco (355 Rue Peel Suites 203-208, Montréal, QC H3C 2G9)
+---
+
+# Next edition: {{ page.date_en }}
+[French version](#french)
+
+### Season {{ page.season }} Episode {{ page.episode }}
+
+## {{ page.title }}
+
+The next edition of Montrehack will be held on {{ page.date_long_en }}.
+
+![ {{ page.featured_img_alt }} ]( {{ page.featured_img }}#centered)
+
+{{ page.description_en }}
+
+{% if page.challenge_assets %}
+{::options parse_block_html="true" /}
+<div class="assets">
+## Challenge Assets
+{% for asset in page.challenge_assets %}
+* [ {{ asset.name }} ]({{ asset.url }})
+{% endfor %}
+</div>
+{% endif %}
+
+{% if page.archived_assets %}
+{::options parse_block_html="true" /}
+<div class="archives">
+## Archives
+This edition is over. Here are the archived assets:
+{% for asset in page.archived_assets %}
+* [ {{ asset.name }} ]({{ asset.url }})
+{% endfor %}
+</div>
+{% endif %}
+
+## Tools and Experience Required
+
+{% for tool in page.tools_en %}
+* {{ tool }}
+{% endfor %}
+
+## Where
+
+
+* {{ page.location }}
+* Follow the presentation [online on Twitch](https://twitch.tv/montrehack/)
+* Participate in teams or on your own [on Discord](https://discord.gg/4qfFwPX)
+
+## When
+
+{{ page.date_long_en | capitalize }}
+
+## How
+
+* Workshop style
+* Bring your own laptop
+* Challenges will be analyzed
+* Small groups of people can work on each challenge
+* Solutions to each challenge will be presented to everyone at the end of the event
+
+## Credits
+
+{{ page.presented_by_en }}
+
+<a id="french"></a>
+
+# Prochaine édition: {{ page.date_fr }}
+
+### Saison {{ page.season }} épisode {{ page.episode }}
+
+## {{ page.title }}
+
+La prochaine édition de Montréhack aura lieu {{ page.date_long_fr }}.
+
+![ {{ page.featured_img_alt }}]( {{ page.featured_img }}#centered)
+
+{{ page.description_fr }}
+
+{% if page.challenge_assets %}
+{::options parse_block_html="true" /}
+<div class="assets">
+## Challenge Assets
+{% for asset in page.challenge_assets %}
+* [ {{ asset.name }} ]({{ asset.url }})
+{% endfor %}
+</div>
+{% endif %}
+
+{% if page.archived_assets %}
+{::options parse_block_html="true" /}
+<div class="archives">
+## Les Archives
+Cette édition est terminé, voici les archives:
+{% for asset in page.archived_assets %}
+* [ {{ asset.name }} ]({{ asset.url }})
+{% endfor %}
+</div>
+{% endif %}
+
+## Outils et expérience requis
+
+{% for tool in page.tools_fr %}
+* {{ tool }}
+{% endfor %}
+
+## Où
+
+* {{ page.location }}
+* Suivez la présentation [en ligne sur Twitch](https://twitch.tv/montrehack/)
+* Participez seul ou en équipe [sur Discord](https://discord.gg/4qfFwPX)
+
+## Quand
+
+{{ page.date_long_fr | capitalize]]
+
+## Comment
+
+* Formule atelier
+* Apportez votre ordinateur portable
+* Des problèmes seront étudiés et expliqués
+* Chaque problème sera analysé en petits groupes
+* Les solutions seront présentées avec tout le monde à la fin de la rencontre
+
+## Remerciements
+
+{{ page.presented_by_fr }}
+
+<hr/>
+### Sponsors // Partenaires
+
+[![NorthSec](/images/nsec_logo.png)](https://nsec.io/)
+
+Interested to sponsor or present a challenge? [Contact us here](https://docs.google.com/forms/d/e/1FAIpQLSecc0vfe3pIwMJjIBCYW4G43ZwtagwVESu_qHKnglnBc3R3ww/viewform?usp=sf_link).