Lifecycle
Badge ecosystems keep moving after handout: apps, hexpansions, SAOs, antennas, cases, repair parts, firmware updates, and post-event hardware experiments.
A challenge-unlocked Warbadging mode scanned up to 30 nearby WiFi networks and displayed signal strength, ESSID, encryption type, and channel coverage.
SourceThe badge boot flow displayed the conference title, scanned wireless networks, waited for a programmed network, connected, and displayed IP and network details.
SourceThe badge implemented a Minecraft Java Edition 1.21.4 server on the ESP32-C3, with in-world levers mapped back to the 24 physical RGB LEDs.
SourceA later challenge stage used badge networking and elevated shell access to start the Minecraft server and solve the in-world lever puzzle.
SourceThe making-of post documents a colour GameOn-derived firmware with menu, single-player game, raycaster, voxel landscape, high-score JSON/WiFi workflow, setup screens, achievements, and debug screens.
SourceThe badge page describes social-game firmware for badge-to-badge duels and asks miniapp authors to submit pull requests so apps can be built into shared firmware.
SourceThe badge runs a MicroPython environment for attendee apps and experimentation on the ESP32-S3.
SourceThe badge's camera was not decorative: Supercon included a film-festival category for movies and media produced with the badge camera.
SourceThe repository and store page say the badge ships with BLE apps, Wi-Fi apps, and a digital-pet app as ready-to-use examples for the event.
SourceThe repository documents Doom Maze, Dino Run, Hackermon, and Star Invaders as bundled badge games with button controls.
SourceThe public app tree includes menu, settings, schedule, Tetris, analog clock, battery monitor, system monitor, and other badge applications.
SourceThe 36C3 badge intentionally shipped without a controller so attendees could attach Arduinos, FPGAs, Feather boards, or other battery-powered controller choices.
SourceThe badge used a 16-bit PIC24FJ256GA704 to simulate a 4-bit educational processor with visible registers, flags, ALU, stack, memory state, and instruction execution.
SourceThe official page says BSides Tallinn 2022 provided each participant a special badge in the legacy theme.
SourceThe AVTOKYO badge used a Pina Colada cocktail-glass shape with transparent non-masked PCB areas to celebrate the conference's no drink, no hack motto.
SourceThe CODE BLUE badge used a scary face with transparent unmasked PCB areas and visible tracks like veins, matching the blue/black conference color treatment.
SourceThe official ROOTCON 15 Artwork/badges directory lists rc15_badges.png as the public badge artwork file.
SourceThe first-hand writeup says the badge indicated information such as build status, last commit, and GitHub stars.
SourceThe organizer retrospective says each attendee received a chip for event activities, challenges awarded experience points, and the chip software was reversible for hidden discoveries.
SourceThe official badge page documents a BLE padlock interaction as one of two badge challenges.
SourceThe 2016 interview says the badge focus shifted toward CTF challenges.
SourceThe official badge page frames the electronic badge as a custom-designed hardware CTF with hidden puzzles and special stages only badge holders can access.
SourceThe official guide documents a mystery encrypted message, D-pad decryption-method selection, classic-cipher basics, and advanced Base32, XOR, AES-128, and ChaCha20 challenges.
SourceThe 2019 badge challenges used blinked binary, silkscreen encoding, badge-role variants, SSRF, and a Docker-hosted challenge app.
SourceThe page documents limited-access and full-access challenges whose solved binary codes are entered through the badge buttons to blink different LED sets and unlock behavior.
SourceA one-byte EEPROM state byte at address 0 gates three hidden bonus LED animations, each unlocked by winning one of three single-player games (Stop The Light, Follow The Sequence, Find The Sequence), with matching two-player variants.
SourceThe first flag path used UART-visible boot/output behavior and per-badge material documented in the Darkglade EasyFlag writeup.
SourceEight hardcoded 4-byte UIDs map to village and event markers (HW Village, Talks1, Talks2, Solder Village, Blue Team, Vendor, CTF, Check-In); scanning a matching tag collects it and lighting all four LEDs blue requires all eight.
SourceThe current Hardware Village page says attendees can test their skills by uncovering secrets hidden in the event's electronic badge.
SourceThe official badge page says AvengerCon IX's badge carried a small four-challenge CTF contest.
SourceThe hard flag path involved firmware inspection, Lua crypto module behavior, AES routines, and badge-specific challenge material.
SourceThe source describes a hidden hardware/firmware challenge using reverse-engineering skills, with prizes for successful solvers.
SourceThe badge CTF uses serial interaction, OSINT, crypto, and stegano story challenges, six floor unlocks, elevator navigation, remembered flags, and a final trophy/leaderboard prompt.
SourceThe repository documents a challenge where the badge emits the encrypted text OIMXEXEXDXLXANYLOXMX and transmits the key MALUMABEBE through LED timing before validating SOLVE:YOAMOMEDELLIN.
SourceThe writeup documents USB file access, Python files, and six challenge flags across web, BLE, roulette, file, and inter-controller puzzle surfaces.
SourceThe PN7150 NFC daughterboard supports tag and reader detection, Mifare Classic read and write, and a flag-hunt where tapping a tag unlocks a flag and broadcasts it to every nearby badge.
SourceThe official badge page documents a one-time-password flow as the second badge challenge.
SourceThe challenge path unlocked rainbow LEDs, login/password interaction, named LED patterns, and custom pattern definition.
SourceThe README says a very partial RubberDucky 2.0 script interpreter is commented out in the code and tied to a single-prize badge competition.
SourceThe badge doubled as a scavenger hunt where attendees collected codes to light the LEDs.
SourceThe Wombat-2 CTF presented seven official puzzles; each successful binary flag lit the matching progress LED on the badge.
SourceNoroff reports that the duck-shaped electronic badge used seven LED lights, each representing a unique challenge, and quotes SolaSec saying there were seven different ways to hack it.
SourceThe firmware encodes two static flags (a plaintext constant and a Ghidra-disassembleable byte-assembled string) plus a hash-based unlock that celebrates a specific UID-derived LED combination.
SourceThe 2024 badge used micro-USB CTF interaction, correct flags, persistent progress, and LED animations to show unlocked challenge state.
SourceThe badge challenge centers on encrypted logs, hidden communications, coordinates, and a rogue underground bitcoin-mining operation stealing power from local businesses.
SourceThe badge emulates magnetic stripe cards over USB serial and includes a solo Simon Says memory game triggered by holding button 4.
SourceThe public challenge archive documents main-badge CAN enumeration, a physical-inspection flag under the battery pack, random traffic, and a UART Python REPL path.
SourceThe official CyberThreat page says CyberThreat 2024 used brand-new hackable badges from Secure Impact with nine challenges.
Source